phpBB 2.0.14 and below suffers from a lack of input filtering on the bbcode url.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38101/phpBBcastle.txt
Source: https://packetstormsecurity.com/files/38101/phpBBcastle.txt.html