Orkut is susceptible to a cross site scripting vulnerability.
147900e9c7c2dec0fe7e48443dcb5355d16053785bae2301b4b0f22e732ddf7c
Greetings!
Doing hard searches and working hard seeking for xss holes we finally found!
The new hole is in the description of the pic, you can put html encode chars
like this.
& l t ; meta http-equiv="refresh" content="0;url=http://suafakeaqui" & g t ;
< means < (minus) or open tag.
> means > ( more ) or close tag.
So you can build great javascripts to stole cookies and whatever you want ;)
*Proof of concept:*
My Profile: http://www.orkut.com/Album.aspx?uid=4196484633792069568 ( just a
javascript with location.href='mypersonalwebsite.com' )
Thanks to Pedro Boara ( http://www.suspensa.info )
Att;
Fábio N Sarmento
Programmer
São Paulo / Brazil