phpBB versions 2.0.17 and below are susceptible to multiple cross site scripting and SQL injection flaws.