The phpbb_clean_username function in phpBB has an improper order of execution allowing path and SQL table disclosure.
d5eb5bb964f49a6baf2a265caf8f92cd
© 2012 Packet Storm. All rights reserved.