Dear Valued Customers,

You need to update phpBB a.s.a.p to phpBB 2.0.13..

* Technical Description *
Two vulnerabilities were reported in phpBB, which may be exploited by attackers to determine the installation path or bypass certain security features. The first problem resides in the "autologinid" (includes/sessions.php) variable and could be exploited by malicious users to gain administrator rights. The second flaw resides in the "viewtopic.php" script, and could be exploited to disclose the webroot path.

* Affected Products *
phpBB version 2.0.12 and prior

* Solution *
phpBB version 2.0.13 :
http://www.phpbb.com/downloads.php

* References *
http://www.k-otik.com/english/advisories/2005/0212
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=267563

* ChangeLog *
2005-02-28 : Original Advisory