CVE-2004-2340: Even Balance Punkbuster Database

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the "PunkBuster Screenshot Database" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the claimed source code is not anywhere in Alpha 6.

Affected products

• Even Balance Punkbuster Database: version 1.0_alpha only; version 2.0_alpha only; version 3.0_alpha only; version 4.0_alpha only; version 5.0_alpha only; version 6.0_alpha only

Published 2004-12-31. Last modified 2026-06-16.