phpBB versions 2.0.13 and below are susceptible to full path disclosure and directory listing flaws.
3be5cf24eabdd90903beeb09e40e0b53ac30e5260897821422ab238c30cc86cd
PostNuke phpBB versions 1.2 and below are susceptible to the same SQL injection vulnerabilities originally found in phpBB itself. Detailed exploitation provided.
e8a0f7fec1bd0b82c1909df6b6b24dbe5334a0d1ce65bfc02045ac1e8cc3ffda