2017 © Pedro Peláez
 

library versionscan

A PHP version scanner for reporting possible vulnerabilities

image

psecio/versionscan

A PHP version scanner for reporting possible vulnerabilities

  • Wednesday, May 2, 2018
  • by enygma
  • Repository
  • 13 Watchers
  • 192 Stars
  • 13,314 Installations
  • PHP
  • 3 Dependents
  • 0 Suggesters
  • 18 Forks
  • 3 Open issues
  • 18 Versions
  • 6 % Grown

The README.md

versionscan

Build Status Total Downloads, (*1)

Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues., (*2)

PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixes. As of right now, this only reports back for the straight up version reported., (*3)

Installation

Using Composer

{
    "require": {
        "psecio/versionscan": "dev-master"
    }
}

The only current dependency is the Symfony console., (*4)

Usage

To run the scan against your current PHP version, use:, (*5)

bin/versionscan, (*6)

The script will check the PHP_VERSION for the current instance and generate the pass/fail results. The output looks similar to:, (*7)

Executing against version: 5.4.24
+--------+---------------+------+------------------------------------------------------------------------------------------------------+
| Status | CVE ID        | Risk | Summary                                                                                              |
+--------+---------------+------+------------------------------------------------------------------------------------------------------+
| FAIL   | CVE-2014-3597 | 6.8  | Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 ... |
| FAIL   | CVE-2014-3587 | 4.3  | Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in... |

Results will be reported back colorized as well to easily show the pass/fail of the check., (*8)

Parameters

There are several parameters that can be given to the tool to configure its scans and results:, (*9)

PHP Version

If you'd like to define a PHP version to check other than the one the script finds itself, you can use the php-version parameter:, (*10)

bin/versionscan scan --php-version=4.3.2

Report Only Failures

You can also tell the versionscan to only report back the failures and not the passing tests:, (*11)

bin/versionscan scan --fail-only

Sorting results

You can also sort the results either by the CVE ID or by severity (risk rating), with the sort parameter and either the "cve" or "risk" value:, (*12)

bin/versionscan scan --sort=risk

Output formats

By default versionscan will output information directly to the console in a human-readable result. You can also specify other output formats that may be easier to parse programatically (like JSON). Use the --format option to change the output:, (*13)

vendor/bin/versionscan scan --php-version=5.5 --format=json

Supported output formats are console, json, xml and html., (*14)

The HTML output format requires an --output option of the directory to write the file:, (*15)

vendor/bin/versionscan scan --php-version=5.5 --format=html --output=/var/www/output

The result will be written to a file named something like versionscan-output-20150808.html, (*16)

The Versions

02/05 2018

dev-master

9999999-dev https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

02/05 2018

1.5.3

1.5.3.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

02/05 2018

1.5.2

1.5.2.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

08/12 2016

1.5.1

1.5.1.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

04/05 2016

1.4.6

1.4.6.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

15/04 2016

1.4.5

1.4.5.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

24/09 2015

1.5

1.5.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

24/09 2015

dev-missing-cmd

dev-missing-cmd https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

09/08 2015

1.4.4

1.4.4.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

22/02 2015

1.4.3

1.4.3.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

12/02 2015

1.4.2

1.4.2.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

05/01 2015

1.4.1

1.4.1.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

02/01 2015

1.4

1.4.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

12/09 2014

1.3

1.3.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

05/09 2014

1.2

1.2.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

The Development Requires

by Chris Cornutt

security version scanner vulnerability

03/09 2014

1.1

1.1.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

by Chris Cornutt

security version scanner vulnerability

02/09 2014

1.0

1.0.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

by Chris Cornutt

security version scanner vulnerability

15/12 2013

0.1

0.1.0.0 https://github.com/psecio/versionscan.git

A PHP version scanner for reporting possible vulnerabilities

  Sources   Download

MIT

The Requires

 

by Chris Cornutt

security version scanner vulnerability