Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) foglang and (2) fogskin parameters, probably related to libs/required/share.inc; and possibly the (3) fogpseudo, (4) fogposted, (5) fogpassword, and (6) fogcook parameters.