phpBB 2.0.17 "Cross Site Scripting" Download an Hex Editor and make your url in the script of that picture with the hax editor Save-me Then, on phpBB 2.0.17, in your profil : Upload Avatar from a URL: Enter the URL of the location containing the Avatar image, it will be copied !! Finally, you can preparer the attaK ! Ex : HTML: [url=http://www.target.com/phpBB2/images/avatars/1547468775545.jpg]Look my sign !![/url] enjOY my friends.. nйM3S!s