PHP Vulnerability Responses by Company

C-Forum

Japan-based services
Aliases / services
シーフォーラム / 株式会社シーフォーラム / C-Forum / ピコ通販 / pico2 / ピコケット
Official website
https://pico2.jp/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Official website patched
Response information checked
2026-10-27 Rechecked: 2026-10-27

C-Forum operates Pico Tsuhan. This notice covers its official website.

On October 23, C-Forum reported that PHP vulnerability fixes for the official website had been completed on October 21. The notice does not describe the status of the entire ordering system.

What users should do

Use the official website normally. Ask Pico Tsuhan about other functions.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://pico2.jp/news/php20261023Response evidence
  2. Operating entityhttps://pico2.jp/company/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments