Launchpad.net

CVE 2006-1492

Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter.

See the CVE page on Mitre.org for more details.