CVE:CVE-2006-5306
CNNVD:CNNVD-200610-295
phpBB的Journals System模块1.0.2(RC2)和更早的版本中有多个PHP远程文件包含漏洞，远程攻击者可以通过(1)includes/journals_delete.php，(2)includes/journals_post.php或(3)includes/journals_edit.php的phpbb_root_path参数中包含的URL来执行任意PHP代码。
solution:Upgrade phpbb journals_system_module to a higher version than 1.0.2_rc2,1.0.2,and avoid the version (,1.0.2_rc2],1.0.2