phpBB 2.0.14 and below suffers from a lack of input filtering on the bbcode url.
c9646fa66fee2116417472c1e236a11c202a287351764d1e185085496bda775a
phpBB versions 2.3.10 and below are susceptible to a directory traversal attack via the attachment module.
6017da91080d54bca6eb92a5128b902c4edae20c3c5f8a1f4287ec17d535dbbb