Facebook.com suffered from session manipulation and cross site request forgery vulnerabilities.