phpbb vulnerablilty

[Mobo]

Software: phpBB 2.x

Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.

Description:
Some vulnerabilities have been reported in phpBB, which potentially can be exploited by malicious people to disclose and delete sensitive information.

The vulnerabilities are caused due to some unspecified errors in the avatar handling functions and may be exploited to disclose and delete arbitrary files.

Some issues disclosing the full path to certain scripts have also been reported.

Solution:
Update to version 2.0.12.
http://www.phpbb.com/downloads.php