Full title: Geonick Social Network Clickjacking / Credential Disclosure 
Category: web applications
Platform: php
Geonick Social Network suffers from a lack of clickjacking protection, it has an insecure crossdomain.xml file, and sends user credentials in the clear.

# 0day.today @ http://0day.today/