slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,978

Image ID Title
CVE-2026-103889 Unrestricted File Upload in 3D Product configurator for WooCommerce (WordPress plugin) (CVE-2026-103889)
CVE-2026-104021 Code Injection in WordPress Apache (CVE-2026-104021)
CVE-2026-102401 Cross-Site Scripting (XSS) in Download Manager (WordPress plugin) (CVE-2026-102401)
CVE-2026-94589 Unrestricted File Upload in Extensions For CF7 (WordPress plugin) (CVE-2026-94589)
CVE-2026-107851 Vulnerability in contao/core-bundle (CVE-2026-107851)
CVE-2026-107845 Cross-Site Scripting (XSS) in contao/comments-bundle (CVE-2026-107845)
CVE-2026-108113 Unrestricted File Upload in ILIAS (CVE-2026-108113)
CVE-2026-108109 Vulnerability in PHPNuxBill (CVE-2026-108109)
CVE-2026-108107 SQL Injection in PHPNuxBill (CVE-2026-108107)
CVE-2026-108101 Unrestricted File Upload in HortusFox (CVE-2026-108101)
CVE-2026-104081 Path Traversal in KodExplorer (CVE-2026-104081)
CVE-2026-94067 Vulnerability in Voux (CVE-2026-94067)
CVE-2026-94062 Vulnerability in Werkstatt (CVE-2026-94062)
CVE-2025-15700 Unrestricted File Upload in AWP Classifieds (WordPress plugin) (CVE-2025-15700)
CVE-2026-107706 Authorization Flaw in Dolibarr ERP CRM (CVE-2026-107706)
CVE-2026-106436 Vulnerability in MongoDB Php Driver (CVE-2026-106436)
CVE-2026-106432 Vulnerability in MongoDB Php Driver (CVE-2026-106432)
CVE-2026-107380 Cross-Site Scripting (XSS) in enshrined/svg-sanitize (CVE-2026-107380)
CVE-2026-107381 Vulnerability in enshrined/svg-sanitize (CVE-2026-107381)
CVE-2026-107379 Vulnerability in enshrined/svg-sanitize (CVE-2026-107379)
CVE-2026-107362 Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php)...
CVE-2026-107334 Authorization Flaw in Malcolm (CVE-2026-107334)
CVE-2026-107333 Authorization Flaw in Malcolm (CVE-2026-107333)
CVE-2026-107376 webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser…
CVE-2026-105436 Unsafe Deserialization in MainWP Child (CVE-2026-105436)
CVE-2026-107639 Vulnerability in ILIAS (CVE-2026-107639)
CVE-2026-107638 Vulnerability in pH7Builder (CVE-2026-107638)
CVE-2026-105830 Vulnerability in league/commonmark (CVE-2026-105830)
CVE-2026-12260 SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ...
CVE-2026-85097 Unrestricted File Upload in Bricksforge (WordPress plugin) (CVE-2026-85097)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details