https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 14:23:44 +0000 https://cve.radiocsirt.org/vuln/cve-2024-1601 <p><strong>Affected:</strong> parisneo/lollms-webui, parisneo lollms-webui</p> <p>An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete all discussions and message data. The vulnerability is exploitable via a crafted HTTP POST request to the `/delete_discussion` endpoint, which internally calls the vulnerable `delete_discussion()` function. By sending a specially crafted payload in the &#39;id&#39; parameter, an attacker can manipulate SQL queries to delete all records from the &#39;discussion&#39; and &#39;message&#39; tables. This issue is due to improper neutralization of special elements used in an SQL command.</p> <p><strong>Affected:</strong> parisneo/lollms-webui, parisneo lollms-webui</p> <p>An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete all discussions and message data. The vulnerability is exploitable via a crafted HTTP POST request to the `/delete_discussion` endpoint, which internally calls the vulnerable `delete_discussion()` function. By sending a specially crafted payload in the &#39;id&#39; parameter, an attacker can manipulate SQL queries to delete all records from the &#39;discussion&#39; and &#39;message&#39; tables. This issue is due to improper neutralization of special elements used in an SQL command.</p> https://cve.radiocsirt.org/vuln/cve-2024-1601