ProVal Tech

Detect-PHP2ShellVulnerability (Windows PowerShell tool)

Response status

Detection and remediation assistance

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Managed operations and automation provider for MSPs.

Reports by default; optional updates cover supported standalone PHP, excluding bundled stacks, vendor PHP and EOL branches.

Scope: Supported Windows environments only. IIS/services may restart; tool availability does not establish patch deployment.

What users should do

Review findings and use a maintenance window; obtain vendor fixes for bundled PHP.

Official service URL

• https://www.provaltech.com/

Source URLs

1. PHP2Shell detection script documentationhttps://content.provaltech.com/docs/f72fd964-8053-48be-9245-7383b3a4db17/Response evidence

PHP2Shell Vulnerability Audit (ConnectWise Automate integration)

Response status

Scheduled audit and optional update integration

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Audits Windows endpoints about every seven days and records results. Scheduled runs report only; standalone PHP remediation is manual.

Scope: Uses ProVal's core utility; integration or audit execution does not prove patching.

What users should do

Review bundled/EOL exclusions and update in a maintenance window.

Source URLs

1. https://content.provaltech.com/docs/756f165f-071f-486a-86b4-cd0890b43bd0/https://content.provaltech.com/docs/756f165f-071f-486a-86b4-cd0890b43bd0/Response evidence
2. PHP2Shell detection script documentationhttps://content.provaltech.com/docs/f72fd964-8053-48be-9245-7383b3a4db17/Service and operation documentation