← Database

CVE-2006-3015

HIGH CVSS: 7.1 Published: 2006-06-14 Modified: 2026-06-16

Description

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI.

Affected Platforms

Winscp Winscp

Weakness Type

CWE-88

References