Monday, March 12, 2007

Orkut Invite

The flaws are due to improper sanitization of inputs passed to ‘continue’ parameter in GET request

Note: Demonstration leads to your personal information disclosure

  • Login to your orkut account.
  • Paste the code in URL bar
  • Click on "BACK" button
  • Orkut Cookies will get displayed


Post a Comment