Check the advertised PHP version from a URL or hostname.
The English summary is being prepared. Showing the original description.
openai/php2shell-checker130Updated Oct 22, 2026
phpcheck-server
Check PHP2Shell patch status with local or server access.
The English summary is being prepared. Showing the original description.
See how to installFiles included (1)
- SKILL.md1.2 KB
SKILL.md (original)
Review the instructions the agent will receive before you install.
Check the PHP version serving the site. Start with php -v, but verify that
it matches the site's PHP-FPM or Apache installation.
Vulnerable ranges used by the checker as of October 20, 2026:
| PHP branch | Vulnerable range (inclusive) |
|---|---|
| 5.4 | 5.4.0 to 5.4.45 |
| 5.5 | 5.5.0 to 5.5.38 |
| 5.6 | 5.6.0 to 5.6.40 |
| 7.0 | 7.0.0 to 7.0.33 |
| 7.1 | 7.1.0 to 7.1.33 |
| 7.2 | 7.2.0 to 7.2.34 |
| 7.3 | 7.3.0 to 7.3.33 |
| 7.4 | 7.4.0 to 7.4.33 |
| 8.0 | 8.0.0 to 8.0.30 |
| 8.1 | 8.1.0 to 8.1.34 |
| 8.2 | 8.2.0 to 8.2.34 |
| 8.3 | 8.3.0 to 8.3.35 |
| 8.4 | 8.4.0 to 8.4.26 |
| 8.5 | 8.5.0 to 8.5.11 |
Compare the version and full package revision with current PHP or vendor security advisories. Vendor backports may fix an older version. Treat unlisted branches as unknown until an advisory confirms their status.
The running PHP build and the vendor's package advisory are the useful checks. Configuration settings alone do not establish that PHP is patched. Report the version, patch status, and any required update. If you cannot verify the serving version, report unknown. Do not run exploit probes.
Reviews
No reviews yet. Tell others what you thought.
Comments
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.