NVD

Id
72717  
Name
CVE-2004-2340  
Description
** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the "PunkBuster Screenshot Database" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the claimed source code is not anywhere in Alpha 6.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2340  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374813 72717 CVE-2004-2340 1009145  View
374814 72717 CVE-2004-2340 20040219 PunkBuster SQL Injection Attack  View
374815 72717 CVE-2004-2340 9697  View
374816 72717 CVE-2004-2340 punkbuster-login-sql-injection(15267)  View

Related JVN