CVE:CVE-2006-3015
CNNVD:CNNVD-200606-297
WinSCP 存在自变量注入漏洞，远程攻击者可通过在scp或sftp URI中的编码空格和双引号字符来上载或下载任意文件。
solution:Upgrade winscp winscp to a higher version than 3.8.1_build328,and avoid the version 3.8.1_build328