PHP 5.x Remote Code Execution Exploit

Affected and tested versions:

PHP 5.3.10

PHP 5.3.8-1

PHP 5.3.6-13

PHP 5.3.3

PHP 5.2.17

PHP 5.2.11

PHP 5.2.6-3

PHP 5.2.6+lenny16 with Suhosin-Patch

Affected versions

PHP prior to 5.3.12

PHP prior to 5.4.2

Unaffected versions

PHP 4 - getopt parser unexploitable

PHP 5.3.12 and up

PHP 5.4.2 and up

Unaffected versions are patched by CVE-2012-1823

 

 http://www.exploit-db.com/exploits/29290/