slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,005

Image ID Title
CVE-2025-60191 Vulnerability in Premmerce Wishlist for WooCommerce (CVE-2025-60191)
CVE-2025-60197 Vulnerability in Simple Contact Forms (CVE-2025-60197)
CVE-2025-60196 Vulnerability in Clearblue Ovulation Calculator (CVE-2025-60196)
CVE-2025-60194 Vulnerability in Premmerce Product Search for WooCommerce (CVE-2025-60194)
CVE-2025-60189 Vulnerability in PoloPag – Pix Automático para Woocommerce (CVE-2025-60189)
CVE-2025-60074 Vulnerability in Lazy Load Optimizer (CVE-2025-60074)
CVE-2025-60073 Vulnerability in Responsive Sidebar (CVE-2025-60073)
CVE-2025-60190 Vulnerability in Immocaster WordPress Plugin (CVE-2025-60190)
CVE-2025-58995 Vulnerability in Leblix (CVE-2025-58995)
CVE-2025-58994 Vulnerability in Greenify (CVE-2025-58994)
CVE-2025-48090 Vulnerability in Blanka - One Page WordPress Theme (CVE-2025-48090)
CVE-2024-13992 Cross-Site Scripting (XSS) in Nagios Xi (CVE-2024-13992)
CVE-2025-10897 Path Traversal in WooCommerce Designer Pro (WordPress theme) (CVE-2025-10897)
CVE-2025-7846 Vulnerability in WordPress User Extra Fields (WordPress plugin) (CVE-2025-7846)
CVE-2025-27208 Cross-Site Scripting (XSS) in Revive Adserver (CVE-2025-27208)
CVE-2020-36863 Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler did not properly restrict file types or enforce stora...
CVE-2020-36856 Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_test.php script. Insufficient validation of the `address` parameter allows an auth...
CVE-2025-62797 FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery (CSRF)…
CVE-2025-64195 Vulnerability in Eduma (CVE-2025-64195)
CVE-2025-4665 SQL Injection in WordPress plugin Contact Form CFDB7 (CVE-2025-4665)
CVE-2025-56399 Code Injection in Laravel (CVE-2025-56399)
CVE-2025-12378 Vulnerability in code-projects Simple Food Ordering System (CVE-2025-12378)
CVE-2025-12347 Vulnerability in MaxSite CMS (CVE-2025-12347)
CVE-2025-12346 Vulnerability in MaxSite CMS (CVE-2025-12346)
CVE-2025-12337 Vulnerability in Campcodes Retro Basketball Shoes Online Store (CVE-2025-12337)
CVE-2025-12336 Vulnerability in Campcodes Retro Basketball Shoes Online Store (CVE-2025-12336)
CVE-2025-12339 Vulnerability in Campcodes Retro Basketball Shoes Online Store (CVE-2025-12339)
CVE-2025-12342 Vulnerability in Serdar Bayram Ghost Hot Spot (CVE-2025-12342)
CVE-2025-12335 Cross-Site Scripting (XSS) in code-projects E-Commerce Website (CVE-2025-12335)
CVE-2025-12332 Cross-Site Scripting (XSS) in SourceCodester Student Grades Management System (CVE-2025-12332)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details