[Edaily Reporter An Yu-ri ] Piolink, Inc.(170790)has released an online diagnostic tool that allows users to check whether their websites are vulnerable to a PHP vulnerability. By entering a website address, users can verify the server’s PHP version and view information on necessary corrective actions.

According to Piolink, Inc. on the 23rd, the company has launched a “php2shell Emergency Check” page on its official website. The check page classifies whether a site is vulnerable based on the PHP version detected in the server’s response after the user enters the URL. Results are presented as “Vulnerable,” “Patch Applied,” or “Unverifiable,” and the page also provides guidance on updates and temporary mitigation measures. The tool uses only information obtained during normal access processes and does not carry out actual attacks.

Even if you don’t know which PHP version your website uses, anyone who needs to check can simply enter their website address. The service identifies the PHP version used by the server and reports one of three statuses: “Vulnerable,” “Patch Applied,” or “Unverifiable.” Based on the result, you can immediately view a guide on how to update the software or implement temporary countermeasures.

The check works just like a normal web request, examining only the server’s response data; it does not send any requests that would actually exploit vulnerabilities. Results are available within a few seconds. However, servers that hide their version may be marked as “Unverified,” which does not necessarily mean they are secure; users are therefore advised to verify the version directly on the server.

In addition, the scan page provides a “Self-Checklist” that security personnel can use to verify whether corrective actions have been taken, as well as an “Analysis Report” based on the company’s Cyber Threat Intelligence (CTI). The site is scheduled to remain publicly available for one week.

Cho Young-chul, CEO of Piolink, Inc., stated, “While security efforts to date have focused on analyzing causes after incidents, we must now take a proactive approach by continuously monitoring external exposure and detecting risks in advance.” He added, “This inspection page provides not only the inspection results but also guidance on how to identify warning signs. Users can also check information on vulnerable PHP versions and the corresponding mitigation measures. “As attackers become faster through AI and automation, defenses must also be strengthened by utilizing AI-based threat management tools like BlueHunter,” he said.