slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2025-11397 Vulnerability in SourceCodester Hotel and Lodge Management System (CVE-2025-11397)
CVE-2025-11396 Vulnerability in code-projects Simple Food Ordering System (CVE-2025-11396)
CVE-2025-11390 Cross-Site Scripting (XSS) in PHPGurukul Cyber Cafe Management System (CVE-2025-11390)
CVE-2025-11359 Vulnerability in code-projects Simple Banking System (CVE-2025-11359)
CVE-2025-11357 Vulnerability in code-projects Simple Banking System (CVE-2025-11357)
CVE-2025-11358 Vulnerability in code-projects Simple Banking System (CVE-2025-11358)
CVE-2025-11354 Vulnerability in code-projects Online Hotel Reservation System (CVE-2025-11354)
CVE-2025-11353 Vulnerability in code-projects Online Hotel Reservation System (CVE-2025-11353)
CVE-2025-11351 Vulnerability in code-projects Online Hotel Reservation System (CVE-2025-11351)
CVE-2025-11352 Vulnerability in code-projects Online Hotel Reservation System (CVE-2025-11352)
CVE-2025-11350 Vulnerability in Campcodes Online Apartment Visitor Management System (CVE-2025-11350)
CVE-2025-11349 Vulnerability in Campcodes Online Apartment Visitor Management System (CVE-2025-11349)
CVE-2025-11348 Vulnerability in Campcodes Online Apartment Visitor Management System (CVE-2025-11348)
CVE-2025-11347 Vulnerability in code-projects Student Crud Operation (CVE-2025-11347)
CVE-2025-11343 Vulnerability in code-projects Student Crud Operation (CVE-2025-11343)
CVE-2025-11342 Vulnerability in code-projects Online Course Registration (CVE-2025-11342)
CVE-2025-61766 Vulnerability in Bucket (CVE-2025-61766)
CVE-2025-11334 Vulnerability in Campcodes Online Apartment Visitor Management System (CVE-2025-11334)
CVE-2025-11333 Cross-Site Scripting (XSS) in langleyfcu Online Banking System (CVE-2025-11333)
CVE-2025-11330 Vulnerability in PHPGurukul Beauty Parlour Management System (CVE-2025-11330)
CVE-2025-11329 Vulnerability in code-projects Online Course Registration (CVE-2025-11329)
CVE-2025-9703 Vulnerability in Ultimate Addons for Elementor (WordPress plugin) (CVE-2025-9703)
CVE-2025-11319 Vulnerability in nahiduddinahammed Hospital-Management-System-Website (CVE-2025-11319)
CVE-2025-11306 Cross-Site Scripting (XSS) in qianfox FoxCMS (CVE-2025-11306)
CVE-2025-11291 Cross-Site Scripting (XSS) in ixmaps website2017 (CVE-2025-11291)
CVE-2025-11284 A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this…
CVE-2025-9886 Cross-Site Request Forgery (CSRF) in WordPress (CVE-2025-9886)
CVE-2025-9895 Cross-Site Request Forgery (CSRF) in Notification Bar (WordPress plugin) (CVE-2025-9895)
CVE-2025-9885 Cross-Site Request Forgery (CSRF) in MPWizard – Create Mercado Pago Payment Links (WordPress plugin) (CVE-2025-9885)
CVE-2025-7721 Vulnerability in WordPress (CVE-2025-7721)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details