CVE-2008-2227

CVE-2008-2227 describes multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6. These flaws allow remote attackers to include and execute arbitrary local files by manipulating the settings[locale] parameter in forum.php and profile.php. With a CVSS score of 6.8, this vulnerability is considered medium severity, indicating that an unauthenticated attacker can achieve partial confidentiality, integrity, and availability impacts with moderate attack complexity. While there is no evidence of active exploitation or Metasploit/Nuclei modules, exploit code is publicly available on ExploitDB, though community discussion and media coverage are minimal.