CVE-2009-1669

CVE-2009-1669 is a critical vulnerability affecting Smarty 2.6.22, specifically within the smarty_function_math function. Attackers can achieve arbitrary command execution by injecting shell metacharacters into the 'equation' attribute of the math function. This vulnerability has a CVSS score of 10.0, indicating a severe risk with a network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists (EDB-8659) for a related Bitweaver 2.6 vulnerability, and there is minimal community discussion or media coverage.