slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,988

Image ID Title
CVE-2026-97865 Vulnerability in Open-Web-Analytics (CVE-2026-97865)
CVE-2026-97864 Authentication Bypass in GibbonEdu Gibbon (CVE-2026-97864)
CVE-2026-96752 Cross-Site Scripting (XSS) in Zero Spam for (WordPress plugin) (CVE-2026-96752)
CVE-2026-93901 Privilege Escalation in Optima Express IDX (WordPress plugin) (CVE-2026-93901)
CVE-2026-93656 Cross-Site Scripting (XSS) in WordPress (CVE-2026-93656)
CVE-2026-19804 Code Injection in WordPress (CVE-2026-19804)
CVE-2026-13456 Vulnerability in WordPress (CVE-2026-13456)
CVE-2026-92799 Vulnerability in Online Scheduling and Appointment Booking System – Bookly (WordPress plugin) (CVE-2026-92799)
CVE-2026-92746 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92746)
CVE-2026-97818 Authorization Flaw in phpIPAM (CVE-2026-97818)
CVE-2026-97735 Cross-Site Scripting (XSS) in ITFlow (CVE-2026-97735)
CVE-2026-97650 Cross-Site Scripting (XSS) in ningzichun student-management-system (CVE-2026-97650)
CVE-2026-97730 Vulnerability in Netgate pfSense Plus (CVE-2026-97730)
CVE-2026-97647 Vulnerability in ningzichun student-management-system (CVE-2026-97647)
CVE-2026-97646 Vulnerability in ningzichun student-management-system (CVE-2026-97646)
CVE-2026-87902 KEV [KEV] Vulnerability in WordPress Core (CVE-2026-87902)
CVE-2026-61816 Vulnerability in zbateson/mail-mime-parser (CVE-2026-61816)
CVE-2026-61815 Vulnerability in zbateson/mail-mime-parser (CVE-2026-61815)
CVE-2026-62368 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-62368)
CVE-2026-63498 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-63498)
CVE-2026-96745 Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names…
CVE-2026-12227 Vulnerability in Visual Composer Website Builder (WordPress plugin) (CVE-2026-12227)
CVE-2026-88843 Path Traversal in MasterStudy LMS WordPress Plugin (WordPress plugin) (CVE-2026-88843)
CVE-2026-80513 Unsafe Deserialization in wpForo Forum (WordPress plugin) (CVE-2026-80513)
CVE-2026-96898 Path Traversal in yhx070424 ShopXO (CVE-2026-96898)
CVE-2026-96777 Vulnerability in Forma LMS (CVE-2026-96777)
CVE-2026-96773 Open Redirect in Intelliants Subrion CMS (CVE-2026-96773)
CVE-2026-96751 Vulnerability in pmTicket Project-Management-Software (CVE-2026-96751)
CVE-2026-96739 Cross-Site Scripting (XSS) in SEMCMS (CVE-2026-96739)
CVE-2026-96603 Vulnerability in Abdurrab5 online-makeup-store (CVE-2026-96603)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details