CVE-2006-3015

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI.

Metrics

CVSS 2.0 7.1/10AV:N/AC:H/Au:N/C:C/I:C/A:N

Weakness enumeration

CWE-88

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.htmlBroken Link
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.htmlBroken Link, Exploit
http://secunia.com/advisories/20575Broken Link, Vendor Advisory
http://winscp.net/eng/docs/history#3.8.2Release Notes
http://www.kb.cert.org/vuls/id/912588Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/18384Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2006/2289Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/27075Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.htmlBroken Link
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.htmlBroken Link, Exploit
http://secunia.com/advisories/20575Broken Link, Vendor Advisory
http://winscp.net/eng/docs/history#3.8.2Release Notes
http://www.kb.cert.org/vuls/id/912588Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/18384Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2006/2289Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/27075Third Party Advisory, VDB Entry

Timeline

Published: Jun 14, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-30169.3Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session CVE-2006-30179.3zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, whic CVE-2006-30187.5Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap c CVE-2006-30197.5Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the CVE-2006-30206.8Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary CVE-2006-30216.8Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary CVE-2006-30226.8Cross-site scripting (XSS) vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script o CVE-2006-30234.3Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers t CVE-2006-30244.3Multiple cross-site scripting (XSS) vulnerabilities in EvGenius Counter 3.4 and earlier allow remote attackers to inject arbitrary web scrip CVE-2006-30256.8Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script CVE-2006-30264.3Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or CVE-2006-30277.5Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via