writeups.xyz / IP spoofing and SQL injection in Textcube

Submitter : c2a

Date: 15 March 2023

Bounty : undisclosed

Vulnerabilities :

• SQL Injection
• IP Spoofing
• HTTP Header Attack
• Security Code Review

Programs :

• Textcube

Authors :

• Sjoerd Langkemper

Link :
https://www.sjoerdlangkemper.nl/2023/03/15/textcube-sql-injection-session-ip-spoofing/