slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,012

Image ID Title
CVE-2025-14203 Vulnerability in code-projects Question Paper Generator (CVE-2025-14203)
CVE-2025-14201 Cross-Site Scripting (XSS) in alokjaiswal Hotel-Management-services-using-MYSQL-and-php (CVE-2025-14201)
CVE-2025-14200 Cross-Site Scripting (XSS) in alokjaiswal Hotel-Management-services-using-MYSQL-and-php (CVE-2025-14200)
CVE-2025-14195 Vulnerability in code-projects Employee Profile Management System (CVE-2025-14195)
CVE-2025-14194 Cross-Site Scripting (XSS) in code-projects Employee Profile Management System (CVE-2025-14194)
CVE-2025-14193 Vulnerability in code-projects Employee Profile Management System (CVE-2025-14193)
CVE-2025-14192 Vulnerability in RashminDungrani online-banking (CVE-2025-14192)
CVE-2025-14189 Vulnerability in Chanjet CRM (CVE-2025-14189)
CVE-2025-14090 Vulnerability in AMTT Hotel Broadband Operation System (CVE-2025-14090)
CVE-2025-14091 Vulnerability in TrippWasTaken PHP-Guitar-Shop (CVE-2025-14091)
CVE-2025-12851 Vulnerability in My auctions allegro (WordPress plugin) (CVE-2025-12851)
CVE-2025-13622 Cross-Site Scripting (XSS) in Jabbernotification (WordPress plugin) (CVE-2025-13622)
CVE-2025-13623 Cross-Site Scripting (XSS) in Twitscription (WordPress plugin) (CVE-2025-13623)
CVE-2025-13494 Information Disclosure in SSP Debug (WordPress plugin) (CVE-2025-13494)
CVE-2025-66509 Vulnerability in Laravel LaraDashboard (CVE-2025-66509)
CVE-2024-58276 SQL Injection in Obi08/Enrollment System (CVE-2024-58276)
CVE-2025-66571 Unsafe Deserialization in UNA CMS (CVE-2025-66571)
CVE-2025-14013 Cross-Site Scripting (XSS) in JIZHICMS (CVE-2025-14013)
CVE-2025-14012 Vulnerability in JIZHICMS (CVE-2025-14012)
CVE-2025-14011 Vulnerability in JIZHICMS (CVE-2025-14011)
CVE-2025-14007 Cross-Site Scripting (XSS) in dayrui XunRuiCMS (CVE-2025-14007)
CVE-2025-14006 Cross-Site Scripting (XSS) in dayrui XunRuiCMS (CVE-2025-14006)
CVE-2025-66208 OS Command Injection in Collabora (CVE-2025-66208)
CVE-2025-13645 Path Traversal in Modula Image Gallery (WordPress plugin) (CVE-2025-13645)
CVE-2025-13879 Path Traversal in SOLIDserver IPAM (CVE-2025-13879)
CVE-2025-49643 Vulnerability in Zabbix Frontend (CVE-2025-49643)
CVE-2025-13795 Cross-Site Scripting (XSS) in codingWithElias School Management System (CVE-2025-13795)
CVE-2025-13793 Cross-Site Scripting (XSS) in winston-dsouza Ecommerce-Website (CVE-2025-13793)
CVE-2025-13792 Vulnerability in Qualitor (CVE-2025-13792)
CVE-2025-13789 SSRF (Server-Side Request Forgery) in ZenTao (CVE-2025-13789)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details