slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,258

Image ID Title
CVE-2026-15523 Vulnerability in CodeAstro Simple Online Leave Management System (CVE-2026-15523)
CVE-2026-15518 Vulnerability in AREA (CVE-2026-15518)
CVE-2026-15516 Vulnerability in MacCMS Pro (CVE-2026-15516)
CVE-2026-15502 Vulnerability in AojiaoZero Antaris (CVE-2026-15502)
CVE-2026-15498 Vulnerability in sergomanov SmartHomeAdatum (CVE-2026-15498)
CVE-2026-15492 Cross-Site Scripting (XSS) in igweze wizgrade (CVE-2026-15492)
CVE-2026-15493 Cross-Site Scripting (XSS) in Akpali9 Attendance-Management-System (CVE-2026-15493)
CVE-2026-15494 Vulnerability in AMTT Hotel Broadband Operation System (CVE-2026-15494)
CVE-2026-15490 Vulnerability in RafyMrX TOKO-ONLINE-ROTI (CVE-2026-15490)
CVE-2026-15488 Vulnerability in hcr707305003 shiroiAdmin (CVE-2026-15488)
CVE-2026-15489 Vulnerability in RafyMrX TOKO-ONLINE-ROTI (CVE-2026-15489)
CVE-2026-15482 Vulnerability in Aster Telecom Azcall (CVE-2026-15482)
CVE-2026-15478 Vulnerability in IceHRM (CVE-2026-15478)
CVE-2026-3576 Vulnerability in Planyo Online Reservation System (WordPress plugin) (CVE-2026-3576)
CVE-2026-2354 Unrestricted File Upload in Swiss Toolkit For WP (WordPress plugin) (CVE-2026-2354)
CVE-2026-13250 Vulnerability in Solace Extra (WordPress plugin) (CVE-2026-13250)
CVE-2026-15338 Vulnerability in LA-Studio Element Kit for Elementor (WordPress plugin) (CVE-2026-15338)
CVE-2026-13353 Code Injection in WordPress (CVE-2026-13353)
CVE-2026-57584 Vulnerability in phalcon/cphalcon (CVE-2026-57584)
CVE-2026-54736 Vulnerability in phalcon/cphalcon (CVE-2026-54736)
CVE-2026-13039 Vulnerability in WordPress (CVE-2026-13039)
CVE-2026-54159 Vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159)
CVE-2026-55481 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55481)
CVE-2026-55466 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55466)
CVE-2025-30008 Cross-Site Scripting (XSS) in HestiaCP (CVE-2025-30008)
CVE-2026-39903 Authorization Flaw in Simple Machines Forum (CVE-2026-39903)
CVE-2026-61450 Code Injection in Grav (CVE-2026-61450)
CVE-2026-57961 Path Traversal in phpMyFAQ (CVE-2026-57961)
CVE-2025-11977 Vulnerability in WordPress (CVE-2025-11977)
CVE-2026-15300 SQL Injection in GEO my WP (WordPress plugin) (CVE-2026-15300)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details