slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-35443 Vulnerability in NamelessMC (CVE-2026-35443)
CVE-2026-35447 Vulnerability in NamelessMC (CVE-2026-35447)
CVE-2026-40314 Vulnerability in NamelessMC (CVE-2026-40314)
CVE-2026-33398 Vulnerability in NamelessMC (CVE-2026-33398)
CVE-2026-7195 Vulnerability in Progress Sitefinity (CVE-2026-7195)
CVE-2026-7313 Vulnerability in Progress Sitefinity (CVE-2026-7313)
CVE-2026-39552 Vulnerability in Blueprint (CVE-2026-39552)
CVE-2026-39553 Vulnerability in WaveRide (CVE-2026-39553)
CVE-2026-39555 Unsafe Deserialization in Askka (CVE-2026-39555)
CVE-2026-32250 NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was…
CVE-2025-68886 Vulnerability in Cookiteer (CVE-2025-68886)
CVE-2025-69369 Vulnerability in Racquet (CVE-2025-69369)
CVE-2025-58707 Vulnerability in Spin (CVE-2025-58707)
CVE-2025-58897 Vulnerability in Fermentio (CVE-2025-58897)
CVE-2025-58024 Vulnerability in Accordion FAQ (CVE-2025-58024)
CVE-2025-58705 Vulnerability in Crafti (CVE-2025-58705)
CVE-2025-53440 Vulnerability in Confidant (CVE-2025-53440)
CVE-2026-10581 SSRF (Server-Side Request Forgery) in DedeCMS (CVE-2026-10581)
CVE-2026-10568 Vulnerability in itsourcecode Fees Management System (CVE-2026-10568)
CVE-2026-10100 Cross-Site Scripting (XSS) in Simple Custom Login Page (WordPress plugin) (CVE-2026-10100)
CVE-2026-10558 Vulnerability in SourceCodester Pizzafy Ecommerce System (CVE-2026-10558)
CVE-2026-10559 Vulnerability in SourceCodester Pizzafy Ecommerce System (CVE-2026-10559)
CVE-2026-10299 Vulnerability in code-projects Online Hospital Management System (CVE-2026-10299)
CVE-2026-10296 Vulnerability in itsourcecode Fees Management System (CVE-2026-10296)
CVE-2026-10301 Cross-Site Scripting (XSS) in itsourcecode Fees Management System (CVE-2026-10301)
CVE-2026-10302 Vulnerability in itsourcecode Fees Management System (CVE-2026-10302)
CVE-2026-10297 Vulnerability in itsourcecode Fees Management System (CVE-2026-10297)
CVE-2026-49491 SQL Injection in Pixa Bank (CVE-2026-49491)
CVE-2026-10290 Vulnerability in code-projects Hotel and Tourism Reservation System (CVE-2026-10290)
CVE-2018-25429 SQL Injection in Paroiciel (CVE-2018-25429)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details