Users of FileZilla, the popular open source FTP client, may have noticed a rather serious looking bug described in the change log for the latest update: Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing.
Read full article on Naked Security