• info
• discussion
• exploit
• solution
• references

phpBB Avatar_Path PHP Code Execution Vulnerability

Solution:
The vendor has released version 2.0.22 to address this and other issues.


phpBB phpBB 2.0.18

• phpBB phpBB-2.0.22.tar.gz
  http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.22.tar.gz

phpBB phpBB 2.0.20

• phpBB phpBB-2.0.22.tar.gz
  http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.22.tar.gz

phpBB phpBB 2.0.21

• phpBB phpBB-2.0.22.tar.gz
  http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.22.tar.gz