slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2025-10615 Vulnerability in itsourcecode E-Commerce Website (CVE-2025-10615)
CVE-2025-10613 Vulnerability in itsourcecode Student Information System (CVE-2025-10613)
CVE-2025-10604 Vulnerability in PHPGurukul Online Discussion Forum (CVE-2025-10604)
CVE-2025-10605 Cross-Site Scripting (XSS) in Portabilis i-Educar (CVE-2025-10605)
CVE-2025-10600 Vulnerability in SourceCodester Online Exam Form Submission (CVE-2025-10600)
CVE-2025-10601 Vulnerability in SourceCodester Online Exam Form Submission (CVE-2025-10601)
CVE-2025-10602 Vulnerability in SourceCodester Online Exam Form Submission (CVE-2025-10602)
CVE-2025-10597 Vulnerability in kidaze CourseSelectionSystem (CVE-2025-10597)
CVE-2025-10598 Vulnerability in SourceCodester Pet Grooming Management Software (CVE-2025-10598)
CVE-2025-10599 Vulnerability in itsourcecode Web-Based Internet Laboratory Management System (CVE-2025-10599)
CVE-2025-10595 Vulnerability in SourceCodester Online Student File Management System (CVE-2025-10595)
CVE-2025-10596 Vulnerability in SourceCodester Online Exam Form Submission (CVE-2025-10596)
CVE-2025-10593 Vulnerability in SourceCodester Online Student File Management System (CVE-2025-10593)
CVE-2025-10594 Vulnerability in SourceCodester Online Student File Management System (CVE-2025-10594)
CVE-2025-10592 Vulnerability in itsourcecode Online Public Access Catalog OPAC (CVE-2025-10592)
CVE-2025-10590 Cross-Site Scripting (XSS) in Portabilis i-Educar (CVE-2025-10590)
CVE-2025-10591 Cross-Site Scripting (XSS) in Portabilis i-Educar (CVE-2025-10591)
CVE-2025-10058 Vulnerability in WP Import – Ultimate CSV XML Importer for (WordPress plugin) (CVE-2025-10058)
CVE-2025-10057 Code Injection in WP Import – Ultimate CSV XML Importer for (WordPress plugin) (CVE-2025-10057)
CVE-2025-10584 Cross-Site Scripting (XSS) in Portabilis i-Educar (CVE-2025-10584)
CVE-2025-10050 Path Traversal in Developer Loggers for Simple History (WordPress plugin) (CVE-2025-10050)
CVE-2025-10143 Vulnerability in Catch Dark Mode (WordPress plugin) (CVE-2025-10143)
CVE-2025-10564 Vulnerability in Campcodes Grocery Sales and Inventory System (CVE-2025-10564)
CVE-2025-57145 Cross-Site Scripting (XSS) in ATSMS web application (CVE-2025-57145)
CVE-2025-56295 Unrestricted File Upload in Carmelo (CVE-2025-56295)
CVE-2009-20006 Unrestricted File Upload in osCommerce (CVE-2009-20006)
CVE-2025-57119 Vulnerability in Online Library Management System (CVE-2025-57119)
CVE-2025-57117 Cross-Site Scripting (XSS) in Rems' Employee Management System (CVE-2025-57117)
CVE-2025-10479 Vulnerability in SourceCodester Online Student File Management System (CVE-2025-10479)
CVE-2025-10420 Vulnerability in SourceCodester Student Grading System (CVE-2025-10420)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details