Christoper Boyd, Director of Malware Research for FaceTime Security Labs and Microsoft Security MVP, has come across a security flaw on the popular free image hosting service ImageShack through which anyone could have downloaded the log file associated with any image. Such a log file contains the IP address which was used to upload a particular image.

The file/directory permission related vulnerability was easily exploitable through URL manipulation, a user only needing to change the file extension from .jpg to something else in an ImageShack direct URL. Not being able to parse the Content-Type the browser offered this new file for download. Upon opening it in any text editor, the IP address of the uploader would have been revealed.

Being able to see the IP of anyone who uploaded an image on the website poses a very serious privacy issue. “Considering they have 2+ million uploads a day, that's an awful lot of people to choose from,” notes Christopher Boyd. He also gives several examples of what one might do with this piece of information. They range from scaring people on forums by revealing their IP to running exploits against their computers. 

Sorce 

Rahul Manekari wrote wow... whata big problem .. our system is open to Hackerz...

Thanks for ALERT . Im using Photobucket