CVE-2008-2993

CVE-2008-2993 affects FOG Forum 0.8.1. The vulnerability is a directory-traversal in index.php allowing remote attackers to include and execute arbitrary local files by manipulating the dot-dot (..) in parameters (fog_lang, fog_skin) and possibly (fog_pseudo, fog_posted, fog_password, fog_cook), ...