phpBB versions 2.0.12 and below have a flaw that allows for access to the admin control panel without authorization.