Facebook vulnerability that allowed any photo to be deleted earns $12,500 bounty

JMH · Sep 3, 2013

An Indian electronics and communications engineer who describes himself as a "security enthusiast with a passion for ethical hacking" has discovered a Facebook vulnerability that could have allowed for any photo on the site to be deleted without the owner's knowledge.

Arul Kumar, a 21 year old from Tamil Nadu, discovered that he could delete any Facebook image within a minute, even from verified pages, all without any interaction from the user.

For his efforts in reporting the vulnerability to Facebook's whitehat bug bounty program Kumar received a reward of $12,500

Facebook vulnerability that allowed any photo to be deleted earns $12,500 bounty | Naked Security

Search

Search

Facebook vulnerability that allowed any photo to be deleted earns $12,500 bounty

JMH

Emeritus, Contributor