slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,978

Image ID Title
CVE-2026-109347 Code Injection in Adminer (CVE-2026-109347)
CVE-2026-109327 Cross-Site Scripting (XSS) in Admidio (CVE-2026-109327)
CVE-2026-109328 Cross-Site Scripting (XSS) in Admidio (CVE-2026-109328)
CVE-2026-109329 Vulnerability in Admidio (CVE-2026-109329)
CVE-2026-109318 OS Command Injection in Grav Git Sync (CVE-2026-109318)
CVE-2026-109397 Unrestricted File Upload in Thelia (CVE-2026-109397)
CVE-2026-109398 Vulnerability in Gumlet php-image-resize (CVE-2026-109398)
CVE-2026-107248 Code Injection in Thelia (CVE-2026-107248)
CVE-2026-108900 Vulnerability in Exponent CMS (CVE-2026-108900)
CVE-2026-103535 Code Injection in Thelia (CVE-2026-103535)
CVE-2026-103529 Unrestricted File Upload in Thelia (CVE-2026-103529)
CVE-2026-103528 Vulnerability in Thelia (CVE-2026-103528)
CVE-2026-103522 Unrestricted File Upload in Thelia (CVE-2026-103522)
CVE-2026-103521 Unrestricted File Upload in Thelia (CVE-2026-103521)
CVE-2026-108834 Cross-Site Scripting (XSS) in Cairo-dock Glx-Dock (CVE-2026-108834)
CVE-2026-108827 Vulnerability in Zen Cart (CVE-2026-108827)
CVE-2026-108826 Vulnerability in Zen Cart (CVE-2026-108826)
CVE-2026-108829 Vulnerability in Zen Cart (CVE-2026-108829)
CVE-2026-108828 Vulnerability in Zen Cart (CVE-2026-108828)
CVE-2026-108815 Cross-Site Scripting (XSS) in idcCMS (CVE-2026-108815)
CVE-2026-108812 Vulnerability in SEMCMS (CVE-2026-108812)
CVE-2026-108811 Information Disclosure in WMCMS (CVE-2026-108811)
CVE-2026-108813 Vulnerability in SEMCMS (CVE-2026-108813)
CVE-2026-108814 Vulnerability in SEMCMS (CVE-2026-108814)
CVE-2026-108807 Vulnerability in krupalshah EmployeeRecruitmentSystem (CVE-2026-108807)
CVE-2026-108806 Vulnerability in krupalshah EmployeeRecruitmentSystem (CVE-2026-108806)
CVE-2026-108805 Vulnerability in krupalshah EmployeeRecruitmentSystem (CVE-2026-108805)
CVE-2026-108801 Vulnerability in prasathmani TinyFileManager (CVE-2026-108801)
CVE-2026-108799 Vulnerability in jackq XCMS (CVE-2026-108799)
CVE-2026-108770 SSRF (Server-Side Request Forgery) in Appwrite (CVE-2026-108770)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details