Launchpad.net

CVE 2008-1080

Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.

See the CVE page on Mitre.org for more details.

References