The following is a list of vulnerabilities that are reported by me. (海老原の報告した脆弱性のリストです)

In 2006

  • CSRF vulnerability in Filn (Apr)

In 2011

  • CSRF vulnerability in Openpear (IPA#38838163) (Feb)
  • SQL Injection vulnerability in a SOHO site (IPA#99045153) (Jun)
  • XSS vulnerability in ATND (Jul)
  • Mixed content on SSL page in the website of Recruit, inc. (Jul)
  • Two open-redirector vulnerabilities in a website of So-net Entertainment, inc. (Jul)
  • Seven XSS vulnerabilities in a website of So-net Entertainment, inc. (Jul)
  • Two CSRF vulnerabilities in a website of So-net Entertainment, inc. (Jul)
  • Authentication bypass vulnerability in まちつく (by miss configuration) (Aug)
  • XSS vulnerability in ECナビ (Sep)
  • XSS vulnerability in ギフトランド (Sep)
  • Bypass request header restriction of XMLHttpRequest (camouflage sensitive information) in PC site viewer browser in au by KDDI F001 (Nov) [blog] [webappsec.org]