Recently I found a vulnerability in Facebook which allowed me to read local files from Facebook's servers. The vulnerable part of Facebook was their Careers resume uploader, located at every job offer
more here........http://josipfranjkovic.blogspot.ro/2014/12/reading-local-files-from-facebooks.html
more here........http://josipfranjkovic.blogspot.ro/2014/12/reading-local-files-from-facebooks.html