I'm not sure who is watching the patch releases and bugtraq phpbb posts, so I'll post them here when I find them. I maintain another phpbb installation and we've had serious security problems in the past, much worse than what has happened here. I'd patch things myself if I had access.
Latest patch released:
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194
Chris
phpbb releases, patches, etc...
Moderator: Mike Everman