On a phpBB board, a user having access to the admin panel is able to execute PHP code.
3ce6369b0ae26ca7a1150a8d147e40ac0375ffda69ed95f5228aa4fddd7a4f9b
phpBB HTML template files are parsed and executed as PHP code. Therefore anyone with access to the template files can execute php code on the system.
57848e7264e5ed324bfce768622e8141320eebdee2d3cc09dfcf6983f83dfff2