Vulnerabilities that allow an attacker to inject malicious PHP code exist in the phpBB2 forum using the Cash_Mod module.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35091/phpbbcashmod.txt
Source: https://packetstormsecurity.com/files/35091/phpbbcashmod.txt.html