Software update: phpBB 2.0.13

The phpBB program is a forum package with a user-friendly interface and a number of management functions. The package is developed in PHP language and supports MySQL, MS-SQL, PostgreSQL and Access/ODBC databases for storing the data. Recently, version 2.0.13 has been released by the phpBB Group in which a very serious security vulnerability has been solved. The release notes look like this:

Hi everyone,

phpBB Group announces the release of phpBB 2.0.13. This release addresses two recent security exploits, one of them critical. They were reported a few days after .12 was released and no one is more annoyed than us, having to release a new version in such a short period of time. Fortunately both fixes are easy and in each case just one line needs to be edited.

The first issue is critical and we urge you to fix it on your forums as soon as possible.

The second minor issue, reported to bugtraq several days ago, was the path disclosure bug in viewtopic.php.[break]The following three downloads are ready:
phpBB 2.0.13 – Full Package
phpBB 2.0.13 – Changed Files Only
phpBB 2.0.13 – Patch File Only