slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2025-11039 Vulnerability in Campcodes Computer Sales and Inventory System (CVE-2025-11039)
CVE-2025-11038 Vulnerability in itsourcecode Online Clinic Management System (CVE-2025-11038)
CVE-2025-11040 Vulnerability in code-projects Hostel Management System (CVE-2025-11040)
CVE-2025-11041 Vulnerability in itsourcecode Open Source Job Portal (CVE-2025-11041)
CVE-2025-11036 Vulnerability in code-projects E-Commerce Website (CVE-2025-11036)
CVE-2025-11037 Vulnerability in code-projects E-Commerce Website (CVE-2025-11037)
CVE-2025-11033 Vulnerability in kidaze CourseSelectionSystem (CVE-2025-11033)
CVE-2025-11032 Vulnerability in kidaze CourseSelectionSystem (CVE-2025-11032)
CVE-2025-11030 Vulnerability in Tutorials-Website Employee Management System (CVE-2025-11030)
CVE-2025-11016 Path Traversal in kalcaddle kodbox (CVE-2025-11016)
CVE-2025-60150 Vulnerability in Subscribe to Download (CVE-2025-60150)
CVE-2025-60153 Vulnerability in Subscribe To Unlock (CVE-2025-60153)
CVE-2025-60126 Vulnerability in Testimonial Slider (CVE-2025-60126)
CVE-2025-10307 Path Traversal in Backuply – Backup, Restore, Migrate and Clone (WordPress plugin) (CVE-2025-10307)
CVE-2025-10747 Unrestricted File Upload in WP-DownloadManager (WordPress plugin) (CVE-2025-10747)
CVE-2025-10973 Vulnerability in JackieDYH Resume-management-system (CVE-2025-10973)
CVE-2025-10967 Vulnerability in MuFen-mker PHP-Usermm (CVE-2025-10967)
CVE-2025-10946 Cross-Site Scripting (XSS) in nuz007 smsboom (CVE-2025-10946)
CVE-2025-10945 Cross-Site Scripting (XSS) in nuz007 smsboom (CVE-2025-10945)
CVE-2025-10944 Cross-Site Scripting (XSS) in yi-ge get-header-ip (CVE-2025-10944)
CVE-2025-10943 Cross-Site Scripting (XSS) in MikeCen WeChat-Face-Recognition (CVE-2025-10943)
CVE-2025-10857 Vulnerability in Sale System POS (CVE-2025-10857)
CVE-2025-10848 Vulnerability in Campcodes Society Membership Information System (CVE-2025-10848)
CVE-2025-10851 Vulnerability in Campcodes Gym Management System (CVE-2025-10851)
CVE-2025-10843 Vulnerability in Reservation Online Hotel Reservation System (CVE-2025-10843)
CVE-2025-10842 Vulnerability in code-projects Online Bidding System (CVE-2025-10842)
CVE-2025-10841 Vulnerability in code-projects Online Bidding System (CVE-2025-10841)
CVE-2025-10839 Vulnerability in SourceCodester Pet Grooming Management Software (CVE-2025-10839)
CVE-2025-10840 Vulnerability in SourceCodester Pet Grooming Management Software (CVE-2025-10840)
CVE-2025-10837 Cross-Site Scripting (XSS) in code-projects Simple Food Ordering System (CVE-2025-10837)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details