phpBB versions 2.0.6 and below suffer from a SQL injection vulnerability in the search.php file. Workaround included.