slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,171

Image ID Title
CVE-2026-73671 Open Redirect in Saurus CMS Community Edition (CVE-2026-73671)
CVE-2026-73533 Vulnerability in Ninja Tables Pro (CVE-2026-73533)
CVE-2026-73532 Vulnerability in Fluent Forms Pro (CVE-2026-73532)
CVE-2026-19710 Vulnerability in SourceCodester Simple Student Information System (CVE-2026-19710)
CVE-2026-28176 Unsafe Deserialization in Booking Activities (CVE-2026-28176)
CVE-2026-28149 Unsafe Deserialization in Headless Single Sign On (CVE-2026-28149)
CVE-2026-27380 Unsafe Deserialization in Car Rental Manager (CVE-2026-27380)
CVE-2026-55072 Vulnerability in pimcore/pimcore (CVE-2026-55072)
CVE-2026-49827 Vulnerability in WebErpMesv2 (CVE-2026-49827)
CVE-2026-73628 Cross-Site Scripting (XSS) in Serendipity (CVE-2026-73628)
CVE-2026-18146 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18146)
CVE-2026-46688 The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2…
CVE-2026-46382 The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a…
CVE-2026-73327 Path Traversal in Joomla (CVE-2026-73327)
CVE-2026-35445 Vulnerability in winter/wn-backend-module (CVE-2026-35445)
CVE-2026-32639 Vulnerability in winter/wn-cms-module (CVE-2026-32639)
CVE-2026-32593 SQL Injection in winter/wn-backend-module (CVE-2026-32593)
CVE-2026-32258 Cross-Site Scripting (XSS) in winter/wn-backend-module (CVE-2026-32258)
CVE-2026-32257 Cross-Site Scripting (XSS) in winter/wn-backend-module (CVE-2026-32257)
CVE-2026-67285 Path Traversal in SP Page (CVE-2026-67285)
CVE-2026-18391 Unrestricted File Upload in WooCommerce Subscriptions (WordPress plugin) (CVE-2026-18391)
CVE-2026-15039 Unrestricted File Upload in giftware (WordPress plugin) (CVE-2026-15039)
CVE-2026-55676 Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at…
CVE-2026-19091 Path Traversal in WordPress (CVE-2026-19091)
CVE-2026-13457 Unrestricted File Upload in WordPress Apache (CVE-2026-13457)
CVE-2026-15426 Privilege Escalation in WordPress (CVE-2026-15426)
CVE-2026-72778 Vulnerability in craftcms/cms (CVE-2026-72778)
CVE-2026-72748 Vulnerability in AVideo (CVE-2026-72748)
CVE-2026-72557 Unrestricted File Upload in Cockpit CMS (CVE-2026-72557)
CVE-2026-72556 OS Command Injection in ZoneMinder (CVE-2026-72556)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details