OpenAI has created a skill for Codex, its AI programming assistant, that helps you find out if a website is using a version of PHP with critical vulnerabilities. You can simply enter the website address or run the tool directly on the server to check.
OpenAI has created a skill for Codex, its AI programming assistant, that helps you find out if a website is using a version of PHP with critical vulnerabilities. You can simply enter the website address or run the tool directly on the server to check.
This is reported by OpenAI.
The tool is called PHP Version Checker. It has been published on GitHub in two versions.
The first, phpcheck-url, allows you to check a website even if you don't have access to its server. You just need to provide a link, and the tool will try to determine the PHP version based on the information the website sends to the browser.
The second, phpcheck-server, is intended for those who have access to a server. It allows you to check the installed PHP version directly.
Based on the results of the check, the tool will tell you whether the PHP version is potentially vulnerable or contains the required patches. If the version cannot be determined, it will also warn you about this.
However, there is a caveat. Some sites hide information about the PHP version, so checking only by link does not always work. In addition, the tool does not look for vulnerabilities in the site code, but only compares the PHP version with known dangerous versions.
On October 21st, PHP developers released updates with fixes. They are available in versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12.
Previously, dev.ua wrote that after discovering critical PHP vulnerabilities, similar problems were found in Node.js.
