slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,246

Image ID Title
CVE-2026-19210 Vulnerability in SourceCodester Photo Share Website (CVE-2026-19210)
CVE-2026-19209 Cross-Site Scripting (XSS) in SourceCodester Photo Share Website (CVE-2026-19209)
CVE-2026-19207 Cross-Site Scripting (XSS) in PHPGurukul Company Visitor Management System (CVE-2026-19207)
CVE-2026-62996 Path Traversal in smarty/smarty (CVE-2026-62996)
CVE-2026-62992 Path Traversal in smarty/smarty (CVE-2026-62992)
CVE-2026-19196 Vulnerability in SourceCodester Photo Share Website (CVE-2026-19196)
CVE-2026-16263 Path Traversal in WP Maps (WordPress plugin) (CVE-2026-16263)
CVE-2026-16258 Unsafe Deserialization in Ajax Search Lite (WordPress plugin) (CVE-2026-16258)
CVE-2026-63725 OS Command Injection in Apache (CVE-2026-63725)
CVE-2026-19070 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19070)
CVE-2026-19067 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19067)
CVE-2026-19068 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19068)
CVE-2026-19071 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19071)
CVE-2026-19069 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19069)
CVE-2026-19066 A vulnerability was identified in SourceCodester Online Examination & Learning Management System...
CVE-2026-19065 A vulnerability was determined in SourceCodester Online Examination & Learning Management System...
CVE-2026-19064 A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0....
CVE-2026-11976 The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`)...
CVE-2026-67434 OS Command Injection in squizlabs/php_codesniffer (CVE-2026-67434)
CVE-2026-71488 Vulnerability in league/commonmark (CVE-2026-71488)
CVE-2026-71478 Cross-Site Scripting (XSS) in league/commonmark (CVE-2026-71478)
CVE-2026-71434 Unrestricted File Upload in statamic/cms (CVE-2026-71434)
CVE-2026-65581 Unsafe Deserialization in AI ANN (CVE-2026-65581)
CVE-2026-65579 Unsafe Deserialization in Agricola (CVE-2026-65579)
CVE-2026-65578 Unsafe Deserialization in Agora (CVE-2026-65578)
CVE-2026-65575 Unsafe Deserialization in Accalia (CVE-2026-65575)
CVE-2026-65577 Unsafe Deserialization in Advice (CVE-2026-65577)
CVE-2026-65576 Unsafe Deserialization in Adrena (CVE-2026-65576)
CVE-2026-65571 Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
CVE-2026-65572 Unsafe Deserialization in A.Williams (CVE-2026-65572)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details