A critical flaw in the phpBB forum software has been disclosed that lets attackers hijack any account, including ...