Content spoofing

How it was found

Hi,

I'm Dheeraj and I have found a content spoofing vulnerability in your system.

Description :

Using the following link : https://secure.phabricator.com/auth/login/facebook:facebook.com/?error=<Spoofed Content> Attacker can perform phishing attack.

Attack Example :

https://secure.phabricator.com/auth/login/facebook:facebook.com/?error=We%20are%20having%20trouble%20accessing%20your%20account,%20kindly%20send%20your%20account%20details%20here%[email protected].%20Sorry%20for%20the%20inconvenience%20caused.

Regards Dheeraj @dheerajhere