CVE-2025-10399

A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the component Query Builder UI. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

• CWE-74
• CWE-89

• https://vuldb.com/?ctiid.323834
• https://vuldb.com/?id.323834
• https://vuldb.com/?submit.646353

Published

Sep 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10393A flaw has been found in miurla morphic up to 0.4.5. This im…6.3
• CVE-2025-10394A vulnerability has been found in fcba_zzm ics-park Smart Pa…7.2
• CVE-2025-10395A vulnerability was found in Magicblack MacCMS 2025.1000.405…7.2
• CVE-2025-10396A vulnerability was determined in SourceCodester Pet Groomin…9.8
• CVE-2025-10397A vulnerability was identified in Magicblack MacCMS 2025.100…7.2
• CVE-2025-10398A security flaw has been discovered in fcba_zzm ics-park Sma…8.8
• CVE-2025-1040AutoGPT versions 0.3.4 and earlier are vulnerable to a Serve…8.8
• CVE-2025-10400A security vulnerability has been detected in SourceCodester…8.8
• CVE-2025-10401A vulnerability was detected in D-Link DIR-823x up to 250416…8.8
• CVE-2025-10402A flaw has been found in PHPGurukul Beauty Parlour Managemen…9.8
• CVE-2025-10403A vulnerability has been found in PHPGurukul Beauty Parlour …9.8
• CVE-2025-10404A vulnerability was found in itsourcecode Baptism Informatio…9.8