slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-48945 Unrestricted File Upload in Joomlaworks (CVE-2026-48945)
CVE-2026-48946 Unrestricted File Upload in Apache (CVE-2026-48946)
CVE-2026-48944 Path Traversal in Joomlaworks (CVE-2026-48944)
CVE-2026-56053 Unsafe Deserialization in EventPrime (CVE-2026-56053)
CVE-2026-9773 OS Command Injection in Unraid (CVE-2026-9773)
CVE-2026-9772 OS Command Injection in Unraid (CVE-2026-9772)
CVE-2026-47110 Vulnerability in ueberdosis/tiptap-php (CVE-2026-47110)
CVE-2026-40079 OS Command Injection in Cacti (CVE-2026-40079)
CVE-2026-39899 Path Traversal in Cacti (CVE-2026-39899)
CVE-2026-39900 Cross-Site Scripting (XSS) in Cacti (CVE-2026-39900)
CVE-2026-39948 SQL Injection in Cacti (CVE-2026-39948)
CVE-2026-39955 SQL Injection in Cacti (CVE-2026-39955)
CVE-2026-39894 Vulnerability in Cacti (CVE-2026-39894)
CVE-2026-12242 Code Injection in AdRotate Banner Manager (WordPress plugin) (CVE-2026-12242)
CVE-2026-9643 Cross-Site Scripting (XSS) in WP Meta SEO (WordPress plugin) (CVE-2026-9643)
CVE-2026-9612 Information Disclosure in WhatsOrder – Instant Checkout for WooCommerce (WordPress plugin) (CVE-2026-9612)
CVE-2026-8628 Cross-Site Scripting (XSS) in EntreDroppers (WordPress plugin) (CVE-2026-8628)
CVE-2026-8705 SQL Injection in ClearSale Total (WordPress plugin) (CVE-2026-8705)
CVE-2026-12417 Vulnerability in SignUp & SignIn (WordPress plugin) (CVE-2026-12417)
CVE-2026-10749 Vulnerability in Post Duplicator (WordPress plugin) (CVE-2026-10749)
CVE-2026-3652 Cross-Site Scripting (XSS) in ARForms (WordPress plugin) (CVE-2026-3652)
CVE-2026-55519 Vulnerability in snipe/snipe-it (CVE-2026-55519)
CVE-2026-55483 Vulnerability in snipe/snipe-it (CVE-2026-55483)
CVE-2026-55482 Vulnerability in snipe/snipe-it (CVE-2026-55482)
CVE-2026-50550 Authorization Flaw in snipe/snipe-it (CVE-2026-50550)
CVE-2026-49976 Authorization Flaw in snipe/snipe-it (CVE-2026-49976)
CVE-2026-49870 Vulnerability in snipe/snipe-it (CVE-2026-49870)
CVE-2026-55173 OS Command Injection in wwbn/avideo (CVE-2026-55173)
CVE-2026-44958 An access control bypass allows an advertiser‑level user to activate or deactivate a banner in...
CVE-2026-44959 A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details