slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-46400 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version…
CVE-2026-46401 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper…
CVE-2026-46493 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for…
CVE-2026-46397 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local…
CVE-2026-46398 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version…
CVE-2026-5415 Vulnerability in WordPress (CVE-2026-5415)
CVE-2026-5411 Unrestricted File Upload in WordPress (CVE-2026-5411)
CVE-2026-46392 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the…
CVE-2026-46394 OS Command Injection in HAXcms PHP backend (CVE-2026-46394)
CVE-2026-46399 HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0…
CVE-2026-46390 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version…
CVE-2026-11342 Vulnerability in code-projects Hotel and Tourism Reservation System (CVE-2026-11342)
CVE-2026-11344 Vulnerability in code-projects Vehicle Management System (CVE-2026-11344)
CVE-2026-11337 Cross-Site Scripting (XSS) in tittuvarghese CollegeManagementSystem (CVE-2026-11337)
CVE-2026-11336 Vulnerability in tittuvarghese CollegeManagementSystem (CVE-2026-11336)
CVE-2026-38579 Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative_lte...
CVE-2026-11334 Vulnerability in tittuvarghese CollegeManagementSystem (CVE-2026-11334)
CVE-2026-11333 Vulnerability in tittuvarghese CollegeManagementSystem (CVE-2026-11333)
CVE-2026-11335 Vulnerability in tittuvarghese CollegeManagementSystem (CVE-2026-11335)
CVE-2026-48907 KEV [KEV] Vulnerability in Widget factory JCE editor extension for Joomla (CVE-2026-48907)
CVE-2026-10877 Vulnerability in SourceCodester Ship Ferry Ticket Reservation System (CVE-2026-10877)
CVE-2026-10874 Vulnerability in projectworlds Online Art Gallery Shop Project (CVE-2026-10874)
CVE-2026-48016 Vulnerability in shopware/platform (CVE-2026-48016)
CVE-2026-48014 Vulnerability in shopware/platform (CVE-2026-48014)
CVE-2026-48010 Privilege Escalation in shopware/platform (CVE-2026-48010)
CVE-2026-48009 Information Disclosure in shopware/platform (CVE-2026-48009)
CVE-2026-48008 Vulnerability in shopware/platform (CVE-2026-48008)
CVE-2026-54458 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-54458)
CVE-2026-50182 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50182)
CVE-2026-49279 Cross-Site Scripting (XSS) in wwbn/avideo (CVE-2026-49279)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details