Security researcher Hello Official, has submitted on 26/11/2010 a cross-site-scripting (XSS) vulnerability affecting www.facebook.com, which at the time of submission ranked 2 on the web according to Alexa. 
We manually validated and published a mirror of this vulnerability on 27/01/2011. It is currently fixed. | 
 
              | Date submitted: 26/11/2010 | 
Date published: 27/01/2011 | 
Date fixed: 27/01/2011 | Status:   FIXED |  
 
| Author: Hello Official | 
Domain: www.facebook.com | 
Category: XSS | 
Pagerank: 2 | 
 
 
 
| URL: http://www.facebook.com/friends/?id=115666898500311 | 
 
| 
Click here to view the mirror
 | 
 
| 
 | 
 
 
         
 |