slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2026-89244 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...
CVE-2026-89247 WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML...
CVE-2026-89245 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request...
CVE-2026-89249 Cross-Site Scripting (XSS) in YPTWallet plugin (CVE-2026-89249)
CVE-2026-89248 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication...
CVE-2026-89242 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side...
CVE-2026-89241 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...
CVE-2026-89240 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...
CVE-2026-89148 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in...
CVE-2026-14560 Code Injection in teddy-bear-customize-addon (WordPress plugin) (CVE-2026-14560)
CVE-2026-19985 Cross-Site Scripting (XSS) in Relevanssi – A Better Search (WordPress plugin) (CVE-2026-19985)
CVE-2026-12215 Unrestricted File Upload in OTP Login & Register Woocommerce (WordPress plugin) (CVE-2026-12215)
CVE-2026-11496 Vulnerability in WordPress (CVE-2026-11496)
CVE-2026-84432 Cross-Site Request Forgery (CSRF) in Concrete CMS (CVE-2026-84432)
CVE-2026-68527 Vulnerability in Concrete CMS (CVE-2026-68527)
CVE-2026-88023 Vulnerability in mongodb/mongodb (CVE-2026-88023)
CVE-2026-73699 Unsafe Deserialization in FileRun (CVE-2026-73699)
CVE-2026-73694 OS Command Injection in FileRun (CVE-2026-73694)
CVE-2026-73698 SQL Injection in FileRun (CVE-2026-73698)
CVE-2026-88011 Vulnerability in github.com/traefik/traefik/v2 (CVE-2026-88011)
CVE-2026-79987 A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission...
CVE-2026-81784 Unsafe Deserialization in Wise Chat (CVE-2026-81784)
CVE-2026-88879 Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and...
CVE-2026-88871 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) contains...
CVE-2026-88876 AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization...
CVE-2026-88872 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request...
CVE-2026-88873 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request...
CVE-2026-88874 AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not...
CVE-2026-88870 Cross-Site Request Forgery (CSRF) in LoginControl plugin PGP key endpoints (CVE-2026-88870)
CVE-2026-88869 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details