Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WinSCP URL处理器访问任意文件漏洞
Vulnerability Description
WinSCP是捷克布拉格经济大学所开发与维护的一套在Windows环境下使用SSH的开源图形化SFTP和FTP客户端。该客户端支持SCP、SSH等协议，其主要功能是在本地与远程计算机间安全地复制文件，并且可以直接编辑文件。 WinSCP默认安装了scp://和sftp:// 协议处理器，这可能允许恶意的web内容自动从本地系统向远程服务器上传任意文件，或自动从远程服务器下载文件。
CVSS Information
N/A
Vulnerability Type
N/A