slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 3,765

ID Title
CVE-2026-39848 Vulnerability in csrf (CVE-2026-39848)
CVE-2026-39962 Vulnerability in misp-project (CVE-2026-39962)
CVE-2025-70364 Code Injection in CVE-2025-70364 (CVE-2025-70364)
CVE-2026-34184 Vulnerability in hydrosystempoznan (CVE-2026-34184)
CVE-2026-5836 Cross-Site Scripting (XSS) in CVE-2026-5836 (CVE-2026-5836)
CVE-2026-5835 Cross-Site Scripting (XSS) in CVE-2026-5835 (CVE-2026-5835)
CVE-2026-5837 Vulnerability in sqli (CVE-2026-5837)
CVE-2026-5834 Cross-Site Scripting (XSS) in CVE-2026-5834 (CVE-2026-5834)
CVE-2026-5357 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5357)
CVE-2026-3568 Vulnerability in wordpress (CVE-2026-3568)
CVE-2026-5829 Vulnerability in sqli (CVE-2026-5829)
CVE-2026-5828 Vulnerability in sqli (CVE-2026-5828)
CVE-2026-4326 The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...
CVE-2026-5827 Vulnerability in sqli (CVE-2026-5827)
CVE-2026-5826 Cross-Site Scripting (XSS) in CVE-2026-5826 (CVE-2026-5826)
CVE-2026-5825 Cross-Site Scripting (XSS) in CVE-2026-5825 (CVE-2026-5825)
CVE-2026-5823 Vulnerability in sqli (CVE-2026-5823)
CVE-2026-5824 Vulnerability in sqli (CVE-2026-5824)
CVE-2026-5814 Vulnerability in sqli (CVE-2026-5814)
CVE-2026-5811 Vulnerability in CVE-2026-5811 (CVE-2026-5811)
CVE-2026-5813 Vulnerability in c (CVE-2026-5813)
CVE-2026-5812 Vulnerability in CVE-2026-5812 (CVE-2026-5812)
CVE-2026-5810 Cross-Site Scripting (XSS) in CVE-2026-5810 (CVE-2026-5810)
CVE-2026-5806 Cross-Site Scripting (XSS) in CVE-2026-5806 (CVE-2026-5806)
CVE-2026-5805 Vulnerability in c (CVE-2026-5805)
CVE-2026-5436 Path Traversal in wordpress (CVE-2026-5436)
CVE-2026-35023 Vulnerability in wimi-teamwork (CVE-2026-35023)
CVE-2026-3243 The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....
CVE-2026-39684 Vulnerability in CVE-2026-39684 (CVE-2026-39684)
CVE-2026-39677 Vulnerability in CVE-2026-39677 (CVE-2026-39677)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →