slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-10815 Vulnerability in LakshayD02 Hostel-Management-System-PHP (CVE-2026-10815)
CVE-2026-10811 Vulnerability in itsourcecode Fees Management System (CVE-2026-10811)
CVE-2026-10863 Vulnerability in Misp (CVE-2026-10863)
CVE-2026-10810 Cross-Site Scripting (XSS) in itsourcecode Fees Management System (CVE-2026-10810)
CVE-2026-10806 Vulnerability in mjperpinosa stumasy (CVE-2026-10806)
CVE-2026-10808 Vulnerability in itsourcecode Fees Management System (CVE-2026-10808)
CVE-2026-10807 Vulnerability in mjperpinosa stumasy (CVE-2026-10807)
CVE-2026-10809 Vulnerability in itsourcecode Fees Management System (CVE-2026-10809)
CVE-2019-25734 Path Traversal in Contact Form by WD (CVE-2019-25734)
CVE-2019-25744 Cross-Site Scripting (XSS) in WordPress Popup Builder (CVE-2019-25744)
CVE-2019-25738 Vulnerability in WordPress Hybrid Composer (CVE-2019-25738)
CVE-2019-25730 SQL Injection in Listing Hub CMS (CVE-2019-25730)
CVE-2019-25732 SQL Injection in PHP EI-Tube Script (CVE-2019-25732)
CVE-2019-25729 Cross-Site Request Forgery (CSRF) in PDF Signer (CVE-2019-25729)
CVE-2019-25728 SQL Injection in Care2x (CVE-2019-25728)
CVE-2019-25727 Path Traversal in WordPress Plugin ad manager wd (CVE-2019-25727)
CVE-2026-10737 Vulnerability in SP Project & Document Manager (WordPress plugin) (CVE-2026-10737)
CVE-2026-10777 Authentication Bypass in ealpha072 Student-Management-System (CVE-2026-10777)
CVE-2026-52793 Authentication Bypass in froxlor/froxlor (CVE-2026-52793)
CVE-2026-7888 Unsafe Deserialization in concrete5/concrete5 (CVE-2026-7888)
CVE-2026-10704 Vulnerability in SourceCodester Pizzafy E-Commerce System (CVE-2026-10704)
CVE-2026-10694 Vulnerability in SourceCodester Online Food Ordering System (CVE-2026-10694)
CVE-2026-25861 Vulnerability in QloApps (CVE-2026-25861)
CVE-2026-10620 Vulnerability in code-projects Student Admission System (CVE-2026-10620)
CVE-2026-10624 Vulnerability in SourceCodester Human Resource Management (CVE-2026-10624)
CVE-2026-1829 Code Injection in Content Visibility for Divi Builder (WordPress plugin) (CVE-2026-1829)
CVE-2026-10607 Vulnerability in DedeCMS (CVE-2026-10607)
CVE-2026-10608 Vulnerability in DedeCMS (CVE-2026-10608)
CVE-2026-10606 Vulnerability in DedeCMS (CVE-2026-10606)
CVE-2026-40571 Vulnerability in NamelessMC (CVE-2026-40571)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details