CVE-2006-3015

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.45%

Published

Jun 14, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBWinSCP 3.8.1 - URI Handler Arbitrary File Access

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI.

Weaknesses (CWE)

CWE-88

Affected Products (1)

winscp · winscpvulnerable

References (16)

http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html

Broken Link

http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.html

Broken LinkExploit

http://secunia.com/advisories/20575

Broken LinkVendor Advisory

http://winscp.net/eng/docs/history#3.8.2

Release Notes

http://www.kb.cert.org/vuls/id/912588

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/18384

Broken LinkExploitThird Party Advisory

http://www.vupen.com/english/advisories/2006/2289

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/27075

Third Party AdvisoryVDB Entry

http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html

Broken Link

http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.html

Broken LinkExploit

http://secunia.com/advisories/20575

Broken LinkVendor Advisory

http://winscp.net/eng/docs/history#3.8.2

Release Notes

http://www.kb.cert.org/vuls/id/912588

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/18384

Broken LinkExploitThird Party Advisory

http://www.vupen.com/english/advisories/2006/2289

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/27075

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs