Orkut Invite

The flaws are due to improper sanitization of inputs passed to ‘continue’ parameter in GET request

Note: Demonstration leads to your personal information disclosure

• Login to your orkut account.
• Paste the code in URL bar
• Click on "BACK" button
• Orkut Cookies will get displayed