slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,252

Image ID Title
CVE-2026-53595 Vulnerability in Laravel FreeScout (CVE-2026-53595)
CVE-2026-53594 Path Traversal in Laravel (CVE-2026-53594)
CVE-2026-53593 Unrestricted File Upload in Laravel Apache (CVE-2026-53593)
CVE-2026-53592 Vulnerability in Laravel (CVE-2026-53592)
CVE-2026-53591 Authentication Bypass in Laravel FreeScout (CVE-2026-53591)
CVE-2026-60026 The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP code execution....
CVE-2026-48812 Authentication Bypass in Laravel FreeScout (CVE-2026-48812)
CVE-2026-45295 Vulnerability in Laravel FreeScout (CVE-2026-45295)
CVE-2026-34239 Vulnerability in Chamilo (CVE-2026-34239)
CVE-2026-50743 Cross-Site Request Forgery (CSRF) in Revive Adserver (CVE-2026-50743)
CVE-2026-35048 Vulnerability in PHP 8.0. This (CVE-2026-35048)
CVE-2026-51027 Information Disclosure in FileThingie (CVE-2026-51027)
CVE-2026-57311 Unrestricted File Upload in Windu CMS (CVE-2026-57311)
CVE-2026-16244 Vulnerability in itsourcecode Hospital Management System (CVE-2026-16244)
CVE-2026-16229 Cross-Site Scripting (XSS) in itsourcecode Courier Management System (CVE-2026-16229)
CVE-2026-16228 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-16228)
CVE-2026-16227 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-16227)
CVE-2026-16226 Vulnerability in SourceCodester Pizzafy Ecommerce System (CVE-2026-16226)
CVE-2026-16220 Cross-Site Scripting (XSS) in code-projects Online Examination System (CVE-2026-16220)
CVE-2026-16219 Path Traversal in Croogo CMS (CVE-2026-16219)
CVE-2026-16205 Cross-Site Scripting (XSS) in Pluck CMS (CVE-2026-16205)
CVE-2026-16203 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-16203)
CVE-2026-16202 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-16202)
CVE-2026-16156 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-16156)
CVE-2026-16155 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-16155)
CVE-2026-16154 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-16154)
CVE-2026-57857 Cross-Site Scripting (XSS) in Flow Payment (WordPress plugin) (CVE-2026-57857)
CVE-2026-16152 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-16152)
CVE-2026-16131 Vulnerability in itsourcecode Hospital Management System (CVE-2026-16131)
CVE-2026-63030 KEV [KEV] Vulnerability in WordPress Core (CVE-2026-63030)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details