Argument injection vulnerability in WinSCP 3.8.1 build... · CVE-2006-3015 · GitHub Advisory Database · GitHub

Argument injection vulnerability in WinSCP 3.8.1 build...

High severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Feb 22, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI.

References

Published by the National Vulnerability Database

Jun 14, 2006

Published to the GitHub Advisory Database May 1, 2022

Last updated Feb 22, 2024