SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.Referenceshttp://www.securityfocus.com/bid/9883http://www.securityfocus.com/archive/1/357442https://exchange.xforce.ibmcloud.com/vulnerabilities/15475
