Attackers can abuse Yahoo developer feature to steal user emails, other data

Attackers can read emails, contacts and other private data from the accounts of Yahoo users who visit a malicious page by abusing a feature present on Yahoo's Developer Network website, according to an independent security researcher.

Story added 4. December 2012, content source with full text you can find at link above.