Vendor: http://www.pnphpbb.com/
Vulnerable File: includes/functions_admin.php
Vulnerable Code:
//The phpbb_root_path isn't initialize
include_once( $phpbb_root_path . 'includes/functions.' . $phpEx );
Method To Use:
How To Fix:
Add this code before the include
if ( !defined('IN_PHPBB') )
{
die("Hacking attempt");
}