CVE-2008-6380

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 2, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-63814.6SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with AdCVE-2008-63825.0ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadCVE-2008-63836.0SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module forCVE-2008-63846.8Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers tCVE-2008-63854.3Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTMCVE-2008-63864.3Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML viaCVE-2008-63875.0Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2008-63885.0Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackerCVE-2008-63897.5SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote attCVE-2008-63907.5SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via theCVE-2008-63917.5SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter)CVE-2008-63927.5SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6380: High severity, CVSS 7.5 | Vulnix