CVE-2010-0951

dev4u CMS - SQL Injection via go_target.php kontent_id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-0951. PoCs published by Easy Laster.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in dev4u CMS Personenseiten via the `go_target.php` script. The PoC shows how to extract user credentials by injecting a UNION-based SQL query.

Description

SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Easy Laster · textwebappsphp
https://www.exploit-db.com/exploits/11643

This exploit demonstrates a SQL injection vulnerability in dev4u CMS Personenseiten via the `go_target.php` script. The PoC shows how to extract user credentials by injecting a UNION-based SQL query.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: dev4u CMS Personenseiten
No auth needed
Prerequisites: Access to the vulnerable `go_target.php` endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/11643
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38577
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/56722

Scores

EPSS 0.0097
EPSS Percentile 57.1%

Details

CWE
CWE-89
Status published
Products (1)
dev4u/dev4u_cms
Published Mar 10, 2010
Tracked Since Feb 18, 2026