thecoalman - 9:57 pm on Oct 4, 2011 (gmt 0)

phpBB3 has had no major known exploits since it's release in late'07, when I say major I meant things like SQL injection. Secunia lists 5 exploits found all of which are low level except one. The moderate one was a bug when they introduced RSS feeds that would have allowed someone to read private forums when some other conditions were met....... unlikely these other conditions would be met on most forums anyway and that was patched in days.

[secunia.com...]