PHPBB 2.0.20 suffers from multiple security related issues having to do with avatars.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46422/phpbb2020multi.txt
Source: https://packetstormsecurity.com/files/46422/phpbb2020multi.txt.html