by PathFit

PHP Vulnerability Check

Run a quick check of your site’s risk
from the PHP vulnerability that attackers are exploiting worldwide.

By running the check, you agree to the Terms of Use and Privacy Policy (in Japanese).

What this check tells you

Is the site running PHP?

Looks at response headers, cookies and HTML for signs that the site runs on PHP.

Is the PHP version vulnerable?

Compares the version in X-Powered-By with the official fixed releases (8.5.12 / 8.4.27 / 8.3.36 / 8.2.35).

How urgent it is

Even when the version is hidden, estimates the risk from how likely it is that PHP is running.

What is happening, explained with a shop

Website=Shop
Entry point anyone can access=Order counter
What runs the site (PHP)=Back-office machine
1The shop has an order counter where anyone can hand in an order slip,
and in the back an automatic machine reads each order
and prepares stock checks and shipping.
2The machine has a defect: it fails to clear away old slips
when a job is interrupted or it moves on to the next order,
so a crafted order slip can make it do unauthorized work.
3Once it is taken over, attackers can take the customer list, rewrite notices or shut the shop down,
and even use it as a base for sending dangerous parcels to partners in the shop’s name.
4The manager repairs the defect and confirms that the machine works normally
and that no unauthorized instructions or suspicious parcels are left behind.

Get expert help

We can run an accurate check on sites that could not be judged from outside, and help you update PHP and fix the issue. Our specialists will talk it through with you free of charge. Please contact us through the inquiry form (in Japanese).

Open the inquiry form