EDB-28007

functional

WinSCP 3.8.1 - URI Handler Arbitrary File Access

view exploit source exploit_dbverifiedtype remoteauthor Jelmer Kuperuspublished 2006-06-12catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-3015UShigh7.1Exploit
Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan