Read more articles in Web Application Security Insights
|
 |
| January 05, 2009 | | Facebook contains highly critical XSS vulnerabilities for hackers to exploit, posing privacy risks to users |  The XSSed site reported a series of highly critical XSS vulnerabilities on Facebook (December 15, 2008 and again on January 4, 2009) that hackers can exploit. Various Facebook functionalities affected include the new users registration page, iPhone login, reset password pages, and others.
Malicious people can exploit these XSS bugs to infect millions of Facebook members with malware, adware and spyware. So far, Facebook has not fixed these flaws, so be very careful when using your account by questioning suspicious requests and not accepting friend invites from people you don’t know. by
Erin Swanson
Eswanson@cenzic.com | | |
|
|
