WHID 2006-41: Making money with MySpace bulletin system!

Share/Save

A bug in MySpace allowed a single click on an incoming bulletin by a person to forward it to all his contacts, making spreading a worm (or any content for that matter) too easy.

Additional information:

Attack Method: 
Abuse of Functionality
Cross Site Scripting (XSS)