PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration as used with phpBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.