slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 3,748

ID Title
CVE-2026-72832 Cross-Site Scripting (XSS) in CVE-2026-72832 (CVE-2026-72832)
CVE-2026-72819 Code Injection in c (CVE-2026-72819)
CVE-2026-19794 The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
CVE-2026-19786 Cross-Site Request Forgery (CSRF) in CVE-2026-19786 (CVE-2026-19786)
CVE-2026-19787 Vulnerability in sqli (CVE-2026-19787)
CVE-2026-19784 Vulnerability in CVE-2026-19784 (CVE-2026-19784)
CVE-2026-19785 Vulnerability in sqli (CVE-2026-19785)
CVE-2026-19767 Vulnerability in sqli (CVE-2026-19767)
CVE-2026-19764 A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform...
CVE-2026-73664 Privilege Escalation in CVE-2026-73664 (CVE-2026-73664)
CVE-2026-73661 Vulnerability in CVE-2026-73661 (CVE-2026-73661)
CVE-2026-73663 SQL Injection in CVE-2026-73663 (CVE-2026-73663)
CVE-2026-73662 OS Command Injection in CVE-2026-73662 (CVE-2026-73662)
CVE-2026-73482 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73482)
CVE-2026-73481 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73481)
CVE-2026-73671 Open Redirect in CVE-2026-73671 (CVE-2026-73671)
CVE-2026-73670 SQL Injection in sqli (CVE-2026-73670)
CVE-2026-73532 Vulnerability in CVE-2026-73532 (CVE-2026-73532)
CVE-2026-73533 Vulnerability in CVE-2026-73533 (CVE-2026-73533)
CVE-2026-19710 Vulnerability in sqli (CVE-2026-19710)
CVE-2026-28176 Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
CVE-2026-28149 Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
CVE-2026-27380 Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.
CVE-2026-49827 Vulnerability in CVE-2026-49827 (CVE-2026-49827)
CVE-2026-73628 Cross-Site Scripting (XSS) in CVE-2026-73628 (CVE-2026-73628)
CVE-2026-18146 The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...
CVE-2026-46688 Open Redirect in CVE-2026-46688 (CVE-2026-46688)
CVE-2026-46382 SSRF (Server-Side Request Forgery) in CVE-2026-46382 (CVE-2026-46382)
CVE-2026-73327 Path Traversal in path-traversal (CVE-2026-73327)
CVE-2026-35445 Vulnerability in winter/wn-backend-module (CVE-2026-35445)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →