slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,016

Image ID Title
CVE-2025-49368 Vulnerability in Palladio (CVE-2025-49368)
CVE-2025-49359 Vulnerability in ShieldGroup (CVE-2025-49359)
CVE-2025-14837 Vulnerability in ZZCMS (CVE-2025-14837)
CVE-2025-68434 Cross-Site Request Forgery (CSRF) in Opensourcepos (CVE-2025-68434)
CVE-2025-68147 Cross-Site Scripting (XSS) in Return Policy" configuration field (CVE-2025-68147)
CVE-2025-14836 Vulnerability in ZZCMS (CVE-2025-14836)
CVE-2025-68129 Authorization Flaw in Laravel Auth0 (CVE-2025-68129)
CVE-2025-65233 Cross-Site Scripting (XSS) in SLiMS (CVE-2025-65233)
CVE-2025-67164 OS Command Injection in Pagekit CMS (CVE-2025-67164)
CVE-2025-68062 Vulnerability in MinimogWP (CVE-2025-68062)
CVE-2025-68065 Vulnerability in Hub Core (CVE-2025-68065)
CVE-2025-13439 Information Disclosure in Fancy Product Designer (WordPress plugin) (CVE-2025-13439)
CVE-2025-67751 SQL Injection in ChurchCRM (CVE-2025-67751)
CVE-2025-58173 Vulnerability in FreshRSS (CVE-2025-58173)
CVE-2025-14731 Vulnerability in CTCMS Content Management System (CVE-2025-14731)
CVE-2025-14730 Vulnerability in CTCMS Content Management System (CVE-2025-14730)
CVE-2025-14729 Vulnerability in CTCMS Content Management System (CVE-2025-14729)
CVE-2025-14722 Cross-Site Scripting (XSS) in vion707 DMadmin (CVE-2025-14722)
CVE-2023-53888 Code Injection in Zomplog (CVE-2023-53888)
CVE-2025-66844 SSRF (Server-Side Request Forgery) in Getgrav (CVE-2025-66844)
CVE-2025-14710 Vulnerability in FantasticLBP Hotels Server (CVE-2025-14710)
CVE-2025-14711 Vulnerability in FantasticLBP Hotels Server (CVE-2025-14711)
CVE-2025-14668 Vulnerability in campcodes Advanced Online Examination System (CVE-2025-14668)
CVE-2025-14664 Vulnerability in Campcodes Supplier Management System (CVE-2025-14664)
CVE-2025-14663 Cross-Site Scripting (XSS) in code-projects Student File Management System (CVE-2025-14663)
CVE-2025-14662 Cross-Site Scripting (XSS) in code-projects Student File Management System (CVE-2025-14662)
CVE-2025-14661 Vulnerability in itsourcecode Student Managemen System (CVE-2025-14661)
CVE-2025-14653 Vulnerability in itsourcecode Student Management System (CVE-2025-14653)
CVE-2025-14652 Vulnerability in itsourcecode Online Cake Ordering System (CVE-2025-14652)
CVE-2025-14650 Vulnerability in itsourcecode Online Cake Ordering System (CVE-2025-14650)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details