CVE-2004-2340 - CVE House
Back to Database
Status published High CVE-2004-2340

** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot...

Vulnerability Description

** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the "PunkBuster Screenshot Database" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the claimed source code is not anywhere in Alpha 6.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2340

Credits & Attribution

No credits recorded in the NVD database.

References

More from even balance

View All →
CVE-2006-2587
Buffer overflow in the WebTool HTTP server component in (1)...
Medium 5
CVE-2006-0771
Format string vulnerability in PunkBuster 1.180 and earlier, as used...
Medium 6.4

Affected Vendor

even balance

View all reports →

Affected Software

punkbuster database
Vulnerable Versions:
1.0_alpha, 2.0_alpha, 3.0_alpha, 4.0_alpha, 5.0_alpha, 6.0_alpha

Timeline

Official Publish: August 16th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.