Attachment Mod 2.3.10 module for phpBB when used with Apache mod_mime does not properly handle files with multiple file extensions such as .php.rar which allows remote attackers to upload and execute arbitrary code.