CVE-2010-4799

CVE-2010-4799 describes multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, specifically when the magic_quotes_gpc setting is disabled. Attackers can exploit these flaws by injecting malicious SQL commands through the username and password fields in authenticate.php, and the ID parameter in pwn.php. With a CVSS score of 6.8, this vulnerability is moderately severe, allowing for partial confidentiality, integrity, and availability impacts through network-based attacks with medium complexity. While there is no evidence of active exploitation or inclusion in CISA's KEV catalog, public exploit code exists on ExploitDB, though community discussion and media coverage are minimal.