multiple PHP application poison NULL byte vulnerability phpBB 2.0.21
http://milw0rm.com/exploits/2348

Minerva <= 2.0.21 build 238a (phpbb_root_path) File Include Vulnerability
http://milw0rm.com/exploits/2429

з.ы. сам пока не пробовал эту версию...