slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,213

Image ID Title
CVE-2026-72551 OS Command Injection in Apioo Fusio (CVE-2026-72551)
CVE-2026-73033 Path Traversal in Sucuri Security WordPress plugin through (CVE-2026-73033)
CVE-2026-69118 Authorization Flaw in Cachet (CVE-2026-69118)
CVE-2026-44401 Cross-Site Scripting (XSS) in Typemill CMS (CVE-2026-44401)
CVE-2026-66738 Code Injection in SPIP (CVE-2026-66738)
CVE-2026-18412 OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the...
CVE-2026-63106 SQL Injection in ReadyEcommerce (CVE-2026-63106)
CVE-2026-72592 An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an...
CVE-2026-72574 A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated...
CVE-2026-19075 All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `...
CVE-2026-16985 Unrestricted File Upload in Squeeze (WordPress plugin) (CVE-2026-16985)
CVE-2026-13170 Path Traversal in Eventin (WordPress plugin) (CVE-2026-13170)
CVE-2026-19384 Vulnerability in SourceCodester Simple Doctors Appointment System (CVE-2026-19384)
CVE-2026-19378 Cross-Site Scripting (XSS) in code-projects Task Management System (CVE-2026-19378)
CVE-2026-19376 Vulnerability in Uasoft Badaso (CVE-2026-19376)
CVE-2026-19364 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19364)
CVE-2026-19353 Vulnerability in DedeCMS (CVE-2026-19353)
CVE-2026-19350 Vulnerability in Dolibarr ERP (CVE-2026-19350)
CVE-2026-19347 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19347)
CVE-2026-19345 Vulnerability in code-projects Task Management System (CVE-2026-19345)
CVE-2026-19344 Vulnerability in code-projects Task Management System (CVE-2026-19344)
CVE-2026-19342 Authentication Bypass in code-projects Task Management System (CVE-2026-19342)
CVE-2026-19343 Vulnerability in code-projects Task Management System (CVE-2026-19343)
CVE-2026-18465 Path Traversal in WP MAPS PRO (WordPress plugin) (CVE-2026-18465)
CVE-2026-16267 Unsafe Deserialization in Newsletters (WordPress plugin) (CVE-2026-16267)
CVE-2026-69127 Vulnerability in getkirby/cms (CVE-2026-69127)
CVE-2026-70561 Vulnerability in TestLink (CVE-2026-70561)
CVE-2026-19231 Vulnerability in SourceCodester Simple Doctors Appointment System (CVE-2026-19231)
CVE-2026-19230 Cross-Site Scripting (XSS) in SourceCodester Photo Share Website (CVE-2026-19230)
CVE-2026-19211 Vulnerability in SourceCodester Photo Share Website (CVE-2026-19211)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details