slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,005

Image ID Title
CVE-2025-12334 Cross-Site Scripting (XSS) in code-projects E-Commerce Website (CVE-2025-12334)
CVE-2025-12333 Cross-Site Scripting (XSS) in code-projects E-Commerce Website (CVE-2025-12333)
CVE-2025-12329 Vulnerability in shawon100 RUET OJ (CVE-2025-12329)
CVE-2025-12328 Vulnerability in shawon100 RUET OJ (CVE-2025-12328)
CVE-2025-62524 Information Disclosure in Thm (CVE-2025-62524)
CVE-2025-12326 Vulnerability in shawon100 RUET OJ (CVE-2025-12326)
CVE-2025-12325 Vulnerability in SourceCodester Best Salon Management System (CVE-2025-12325)
CVE-2025-12327 Vulnerability in shawon100 RUET OJ (CVE-2025-12327)
CVE-2025-12316 Vulnerability in code-projects Courier Management System (CVE-2025-12316)
CVE-2025-12312 Cross-Site Scripting (XSS) in PHPGurukul Curfew e-Pass Management System (CVE-2025-12312)
CVE-2025-12311 Cross-Site Scripting (XSS) in PHPGurukul Curfew e-Pass Management System (CVE-2025-12311)
CVE-2025-12314 Vulnerability in code-projects Food Ordering System (CVE-2025-12314)
CVE-2025-12315 Vulnerability in code-projects Food Ordering System (CVE-2025-12315)
CVE-2025-12309 Vulnerability in code-projects Nero Social Networking Site (CVE-2025-12309)
CVE-2025-12308 Vulnerability in code-projects Nero Social Networking Site (CVE-2025-12308)
CVE-2025-12307 Vulnerability in code-projects Nero Social Networking Site (CVE-2025-12307)
CVE-2025-12306 Vulnerability in code-projects Nero Social Networking Site (CVE-2025-12306)
CVE-2025-12301 Vulnerability in code-projects Simple Food Ordering System (CVE-2025-12301)
CVE-2025-12302 Cross-Site Scripting (XSS) in code-projects Simple Food Ordering System (CVE-2025-12302)
CVE-2025-12303 Cross-Site Scripting (XSS) in PHPGurukul Curfew e-Pass Management System (CVE-2025-12303)
CVE-2025-12300 Cross-Site Scripting (XSS) in code-projects Simple Food Ordering System (CVE-2025-12300)
CVE-2025-12298 Cross-Site Scripting (XSS) in code-projects Simple Food Ordering System (CVE-2025-12298)
CVE-2025-12299 Cross-Site Scripting (XSS) in code-projects Simple Food Ordering System (CVE-2025-12299)
CVE-2025-12294 Vulnerability in Sales (CVE-2025-12294)
CVE-2025-12292 Vulnerability in Sales (CVE-2025-12292)
CVE-2025-12293 Vulnerability in Sales (CVE-2025-12293)
CVE-2025-34292 Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of…
CVE-2025-12281 Cross-Site Scripting (XSS) in code-projects Client Details System (CVE-2025-12281)
CVE-2025-12280 Cross-Site Scripting (XSS) in code-projects Client Details System (CVE-2025-12280)
CVE-2025-12282 Cross-Site Scripting (XSS) in code-projects Client Details System (CVE-2025-12282)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details