slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-11488 Vulnerability in code-projects Simple Flight Ticket Booking System (CVE-2026-11488)
CVE-2026-11489 Vulnerability in code-projects Online Music Site (CVE-2026-11489)
CVE-2026-11483 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11483)
CVE-2026-11484 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11484)
CVE-2026-11485 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11485)
CVE-2026-11486 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11486)
CVE-2026-11482 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11482)
CVE-2022-50953 Path Traversal in WordPress Plugin admin-word-count-column (CVE-2022-50953)
CVE-2021-47984 Cross-Site Scripting (XSS) in WordPress Plugin WP24 Domain Check (CVE-2021-47984)
CVE-2021-47983 Cross-Site Scripting (XSS) in WordPress Plugin Stripe Payments (CVE-2021-47983)
CVE-2024-58348 Unrestricted File Upload in WordPress Background Image Cropper (CVE-2024-58348)
CVE-2023-54352 Vulnerability in WordPress Seotheme (CVE-2023-54352)
CVE-2023-54351 Cross-Site Scripting (XSS) in WordPress Sonaar Music Plugin (CVE-2023-54351)
CVE-2023-54350 Vulnerability in WordPress (CVE-2023-54350)
CVE-2026-11476 Vulnerability in Kushan2k student-management-system (CVE-2026-11476)
CVE-2026-11480 Vulnerability in Chengdu Everbrite Network Technology BeikeShop (CVE-2026-11480)
CVE-2026-11475 Vulnerability in Kushan2k student-management-system (CVE-2026-11475)
CVE-2026-11474 Vulnerability in Kushan2k student-management-system (CVE-2026-11474)
CVE-2026-11471 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11471)
CVE-2026-11472 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-11472)
CVE-2026-11462 Vulnerability in Chengdu Everbrite Network Technology BeikeShop (CVE-2026-11462)
CVE-2026-11456 Vulnerability in Chanjet CRM (CVE-2026-11456)
CVE-2026-7795 Cross-Site Scripting (XSS) in Click to Chat – WA Widget (WordPress plugin) (CVE-2026-7795)
CVE-2026-7566 Unsafe Deserialization in LearnPress – Backup & Migration Tool (WordPress plugin) (CVE-2026-7566)
CVE-2026-2500 Path Traversal in Quick Playground (WordPress plugin) (CVE-2026-2500)
CVE-2026-9281 Cross-Site Scripting (XSS) in WordPress (CVE-2026-9281)
CVE-2026-9290 Path Traversal in WordPress (CVE-2026-9290)
CVE-2026-7654 Unsafe Deserialization in Admin Columns (WordPress plugin) (CVE-2026-7654)
CVE-2026-47732 Authorization Flaw in twig/twig (CVE-2026-47732)
CVE-2026-47730 Cross-Site Scripting (XSS) in twig/twig (CVE-2026-47730)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details