← Database

CVE-2009-1662

HIGH CVSS: 7.5 Published: 2009-05-18 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) Password fields, as reachable from admin/index.php.

Affected Platforms

Recipescript Recipe Script

Weakness Type

CWE-89

References