Fake Facebook Wall Posts Using FBML
Today while playing around with Facebook markup language (FBML) which is used in Facebook applications I found that through using the tag </fb:wallpost> it’s possible to fake user posts with ease just by using their user id as Facebook don’t validate that if the posts is really originating from the legitimate user so it allows anybody to use FBML to post wall posts to his/her application with the identity of another user. Here is proof of concept FMBL that you can use in your Facebook application
<fb:wall>
<fb:wallpost uid="[victim id goes here]">
Fady ownz me
</fb:wallpost>
</fb:wall>