CVE-2009-1662

CVE-2009-1662 describes multiple SQL injection vulnerabilities in Wright Way Services Recipe Script 5, specifically within the admin/login.php file. Attackers can exploit these flaws via the username and password fields to execute arbitrary SQL commands. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed on the KEV catalog, an exploit for authentication bypass and database backup is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.