CVE

Id
10766  
CVE No.
CVE-2004-2340  
Status
Candidate  
Description
** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the "PunkBuster Screenshot Database" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the claimed source code is not anywhere in Alpha 6.  
Phase
Assigned (20050816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
75073 10766 CVE-2004-2340 BUGTRAQ:20040219 PunkBuster SQL Injection Attack  View
75074 10766 CVE-2004-2340 URL:http://www.securityfocus.com/archive/1/354453  View
75075 10766 CVE-2004-2340 BID:9697  View
75076 10766 CVE-2004-2340 URL:http://www.securityfocus.com/bid/9697  View
75077 10766 CVE-2004-2340 OSVDB:18981  View
75078 10766 CVE-2004-2340 URL:http://www.osvdb.org/18981  View
75079 10766 CVE-2004-2340 SECTRACK:1009145  View
75080 10766 CVE-2004-2340 URL:http://securitytracker.com/id?1009145  View
75081 10766 CVE-2004-2340 XF:punkbuster-login-sql-injection(15267)  View

Related JVN