slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2025-7825 Vulnerability in Schema Plugin For Divi, Gutenberg & Shortcodes (WordPress plugin) (CVE-2025-7825)
CVE-2025-10726 SQL Injection in WPRecovery (WordPress plugin) (CVE-2025-10726)
CVE-2025-10311 Cross-Site Request Forgery (CSRF) in Comment Info Detector (WordPress plugin) (CVE-2025-10311)
CVE-2025-10212 Vulnerability in SiteAlert (WordPress plugin) (CVE-2025-10212)
CVE-2025-61606 Open Redirect in WeGIA (CVE-2025-61606)
CVE-2025-61665 Information Disclosure in WeGIA (CVE-2025-61665)
CVE-2025-61605 SQL Injection in WeGIA (CVE-2025-61605)
CVE-2025-61603 SQL Injection in WeGIA (CVE-2025-61603)
CVE-2025-40991 Cross-Site Scripting (XSS) in Ekushey CRM v5.0 by Creativeitem (CVE-2025-40991)
CVE-2025-40990 Cross-Site Scripting (XSS) in Ekushey CRM v5.0 by Creativeitem (CVE-2025-40990)
CVE-2025-40989 Cross-Site Scripting (XSS) in Ekushey CRM v5.0 by Creativeitem (CVE-2025-40989)
CVE-2025-34182 Cross-Site Scripting (XSS) in Deciso OPNsense (CVE-2025-34182)
CVE-2025-11141 Command Injection in Ruijie NBR2100G-E (CVE-2025-11141)
CVE-2025-11136 Vulnerability in YiFang CMS (CVE-2025-11136)
CVE-2025-11138 Command Injection in mirweiye wenkucms (CVE-2025-11138)
CVE-2025-11135 Vulnerability in pmTicket Project-Management-Software (CVE-2025-11135)
CVE-2025-11125 Cross-Site Scripting (XSS) in langleyfcu Online Banking System (CVE-2025-11125)
CVE-2025-11124 Cross-Site Scripting (XSS) in code-projects Project Monitoring System (CVE-2025-11124)
CVE-2025-11119 Cross-Site Scripting (XSS) in itsourcecode Hostel Management System (CVE-2025-11119)
CVE-2025-11118 Vulnerability in CodeAstro Student Grading System (CVE-2025-11118)
CVE-2025-11116 Vulnerability in code-projects Simple Scheduling System (CVE-2025-11116)
CVE-2025-11115 Vulnerability in code-projects Simple Scheduling System (CVE-2025-11115)
CVE-2025-11113 Vulnerability in CodeAstro Online Leave Application (CVE-2025-11113)
CVE-2025-11114 Vulnerability in CodeAstro Online Leave Application (CVE-2025-11114)
CVE-2025-11112 Cross-Site Scripting (XSS) in PHPGurukul Employee Record Management System (CVE-2025-11112)
CVE-2025-11111 Vulnerability in Campcodes Advanced Online Voting Management System (CVE-2025-11111)
CVE-2025-11110 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11110)
CVE-2025-11109 Vulnerability in Campcodes Computer Sales and Inventory System (CVE-2025-11109)
CVE-2025-11108 Vulnerability in code-projects Simple Scheduling System (CVE-2025-11108)
CVE-2025-11107 Vulnerability in code-projects Simple Scheduling System (CVE-2025-11107)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details