On a phpBB board, a user having access to the admin panel is able to execute PHP code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45504/phpbb-admin.txt
Source: https://packetstormsecurity.com/files/45504/phpbb-admin.txt.html