slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,246

Image ID Title
CVE-2026-65572 Unsafe Deserialization in A.Williams (CVE-2026-65572)
CVE-2026-65573 Unsafe Deserialization in Abelle (CVE-2026-65573)
CVE-2026-65552 Unsafe Deserialization in Export User Data (CVE-2026-65552)
CVE-2026-65556 Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.
CVE-2026-65549 Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.
CVE-2026-28139 Unsafe Deserialization in Ajax Search Lite (CVE-2026-28139)
CVE-2026-19021 Vulnerability in SourceCodester Computer Repair Shop Management System (CVE-2026-19021)
CVE-2026-19020 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19020)
CVE-2026-18325 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18325)
CVE-2026-16636 Cross-Site Scripting (XSS) in WordPress (CVE-2026-16636)
CVE-2026-15991 Vulnerability in File Manager (WordPress plugin) (CVE-2026-15991)
CVE-2026-18968 Cross-Site Scripting (XSS) in ttttonyhe OBlog (CVE-2026-18968)
CVE-2026-18959 Path Traversal in yushine InnoShop (CVE-2026-18959)
CVE-2026-18958 Vulnerability in imranrisal-dev Student-Management-System (CVE-2026-18958)
CVE-2026-18927 Vulnerability in imranrisal-dev Student-Management-System (CVE-2026-18927)
CVE-2026-53992 ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails...
CVE-2026-15979 Path Traversal in WordPress (CVE-2026-15979)
CVE-2026-71294 Unsafe Deserialization in Cotonti CMS (CVE-2026-71294)
CVE-2026-71293 Information Disclosure in statamic/cms (CVE-2026-71293)
CVE-2026-71292 SQL Injection in Subrion CMS (CVE-2026-71292)
CVE-2026-71287 SQL Injection in Cacti (CVE-2026-71287)
CVE-2026-71291 Vulnerability in Bolt Cms (CVE-2026-71291)
CVE-2026-71251 Vulnerability in Akaunting (CVE-2026-71251)
CVE-2026-71252 toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin...
CVE-2026-18933 Unrestricted File Upload in wp-downloadmanager (WordPress plugin) (CVE-2026-18933)
CVE-2026-71245 SQL Injection in Mautic (CVE-2026-71245)
CVE-2026-71248 SQL Injection in Inventory-Management-System-PHP (CVE-2026-71248)
CVE-2026-71250 SSRF (Server-Side Request Forgery) in Firefly III (CVE-2026-71250)
CVE-2026-71249 299Ko's public contact form (plugin/contact/controllers/ContactController.php, home()) sets raw...
CVE-2026-71233 Cross-Site Scripting (XSS) in Laravel (CVE-2026-71233)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details