← Database

CVE-2008-6380

HIGH CVSS: 7.5 Published: 2009-03-02 Modified: 2026-06-16

Description

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.

Affected Platforms

Activewebsoftwares Active Web Helpdesk

Weakness Type

CWE-89

References