phpBB versions 2.0.6 and below suffer from a SQL injection vulnerability in the search.php file. Workaround included.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32862/phpBB206a.txt
Source: https://packetstormsecurity.com/files/32862/phpBB206a.txt.html