slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2019-25746 SQL Injection in WordPress Sliced Invoices (CVE-2019-25746)
CVE-2016-20077 Vulnerability in WordPress Plugin Photocart Link (CVE-2016-20077)
CVE-2016-20078 Vulnerability in WordPress IMDb Profile Widget (CVE-2016-20078)
CVE-2016-20079 Vulnerability in WordPress Dharma Booking (CVE-2016-20079)
CVE-2016-20080 Vulnerability in WordPress Brandfolder plugin (CVE-2016-20080)
CVE-2016-20081 Path Traversal in WordPress Plugin HB Audio Gallery Lite (CVE-2016-20081)
CVE-2016-20082 Vulnerability in WordPress Plugin Abtest (CVE-2016-20082)
CVE-2016-20083 Cross-Site Request Forgery (CSRF) in WordPress More Fields Plugin (CVE-2016-20083)
CVE-2016-20070 Cross-Site Scripting (XSS) in WordPress Booking Calendar Contact Form (CVE-2016-20070)
CVE-2016-20073 SQL Injection in WordPress Answer My Question (CVE-2016-20073)
CVE-2016-20074 Cross-Site Request Forgery (CSRF) in WordPress Lazy Content Slider Plugin (CVE-2016-20074)
CVE-2016-20075 Authorization Flaw in WordPress Ultimate Product Catalog (CVE-2016-20075)
CVE-2016-20076 Path Traversal in WordPress Simple-Backup (CVE-2016-20076)
CVE-2016-20068 SQL Injection in WordPress Booking Calendar Contact Form (CVE-2016-20068)
CVE-2026-5482 Unrestricted File Upload in Responsive FileManager (CVE-2026-5482)
CVE-2026-12207 Vulnerability in medkey-org medkey (CVE-2026-12207)
CVE-2026-12204 Vulnerability in ShopXO (CVE-2026-12204)
CVE-2026-12176 A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive...
CVE-2026-12175 Vulnerability in CodeAstro Student Attendance Management System (CVE-2026-12175)
CVE-2026-12183 Authentication Bypass in Nefteprodukttekhnika BUK TS-G Gas Station Automation System (CVE-2026-12183)
CVE-2026-9062 Path Traversal in Store Locator (WordPress plugin) (CVE-2026-9062)
CVE-2026-12131 Vulnerability in CodeAstro Human Resource Management System (CVE-2026-12131)
CVE-2026-54362 An incorrect visibility condition in the MISP event template builder allowed authenticated non...
CVE-2026-54360 A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a...
CVE-2026-53787 Unrestricted File Upload in Amasty Order Attributes for Magento (CVE-2026-53787)
CVE-2026-54133 Vulnerability in mtdowling/jmespath.php (CVE-2026-54133)
CVE-2026-12066 Vulnerability in PbootCMS (CVE-2026-12066)
CVE-2026-45060 ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php…
CVE-2026-45418 ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #132, any authenticated user who can…
CVE-2026-46698 SSRF (Server-Side Request Forgery) in WordPress (CVE-2026-46698)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details