CVE-2008-6380: Activewebsoftwares Active Web Helpdesk

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.

Affected products

• Activewebsoftwares Active Web Helpdesk: version 2.0 only

Published 2009-03-02. Last modified 2026-06-16.