BugTraq

Finally the phpBB issue was posted to BugTraq, as a follow-up to the original post by Wang.

I’ve decided to disclose here (to a small group of people) due to the unresponsiveness from the phpBB group, which is the authoritive vendor of phpBB. A official public full disclose of this vulnerablity will be posted to BugTraq someday later.