De Ceukelaire was only able to make the API call because hes registered as a Facebook developer.
Still it is a serious bug according De Ceukelaire who says it could create several problems for Facebook users.
Facebook has not yet commented on De Ceukelaires findings.
source: www.techworm.net