Hivarekar had discovered a way to attach theFacebook victims video to a comment so you can delete it.
In this case, we are talking about the victims Facebook video he wanted to delete.
Facebook responded to Melameds request with a server error, i.e.
This content is no longer available, but the new video was successfully got posted and displayed just fine.
Facebook acknowledged Melamed;s bug discovery as critical and awared him $10,000 as bug bounty.
Facebook has also patched the bug so now the process can be exploited by any hacker.
source: www.techworm.net
