slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2025-10405 Vulnerability in itsourcecode Baptism Information Management System (CVE-2025-10405)
CVE-2025-10387 Vulnerability in codesiddhant Jasmin Ransomware (CVE-2025-10387)
CVE-2025-40690 SQL Injection in Phpgurukul (CVE-2025-40690)
CVE-2025-40693 Cross-Site Scripting (XSS) in Phpgurukul (CVE-2025-40693)
CVE-2025-9874 Vulnerability in Ultimate Classified Listings (WordPress plugin) (CVE-2025-9874)
CVE-2025-10232 Path Traversal in 299ko (CVE-2025-10232)
CVE-2025-10233 Path Traversal in kalcaddle kodbox (CVE-2025-10233)
CVE-2025-34176 Path Traversal in Pfsense (CVE-2025-34176)
CVE-2025-34177 Cross-Site Scripting (XSS) in Pfsense (CVE-2025-34177)
CVE-2025-34178 Cross-Site Scripting (XSS) in Pfsense (CVE-2025-34178)
CVE-2025-34173 Path Traversal in Pfsense (CVE-2025-34173)
CVE-2025-34175 Cross-Site Scripting (XSS) in Pfsense (CVE-2025-34175)
CVE-2025-34172 Cross-Site Scripting (XSS) in Pfsense (CVE-2025-34172)
CVE-2025-10134 Vulnerability in Goza - Nonprofit Charity WordPress Theme (WordPress theme) (CVE-2025-10134)
CVE-2025-55849 SQL Injection in WeiPHP (CVE-2025-55849)
CVE-2025-10079 Vulnerability in PHPGurukul Small CRM (CVE-2025-10079)
CVE-2025-10068 Vulnerability in itsourcecode Online Discussion Forum (CVE-2025-10068)
CVE-2025-10067 Cross-Site Scripting (XSS) in Sale System (CVE-2025-10067)
CVE-2025-10063 Cross-Site Scripting (XSS) in Sale System (CVE-2025-10063)
CVE-2025-10012 Vulnerability in Portabilis i-Educar (CVE-2025-10012)
CVE-2025-9990 Vulnerability in WordPress Helpdesk Integration (WordPress plugin) (CVE-2025-9990)
CVE-2025-9925 Vulnerability in projectworlds Travel Management System (CVE-2025-9925)
CVE-2025-9766 Vulnerability in itsourcecode Sports Management System (CVE-2025-9766)
CVE-2025-9767 Vulnerability in itsourcecode Sports Management System (CVE-2025-9767)
CVE-2025-9765 Vulnerability in itsourcecode Sports Management System (CVE-2025-9765)
CVE-2025-9755 Cross-Site Scripting (XSS) in Khanakag-17 Library Management System (CVE-2025-9755)
CVE-2009-20010 OS Command Injection in Dogfood CRM (CVE-2009-20010)
CVE-2005-10004 OS Command Injection in Cacti (CVE-2005-10004)
CVE-2025-9606 Vulnerability in Portabilis i-Educar (CVE-2025-9606)
CVE-2025-9593 Vulnerability in itsourcecode Apartment Management System (CVE-2025-9593)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details