Launchpad.net

CVE 2005-3799

phpBB 2.0.18 allows remote attackers to obtain sensitive information via a large SQL query, which generates an error message that reveals SQL syntax or the full installation path.

See the CVE page on Mitre.org for more details.