OSVDB: Open Sourced Vulnerability Database

Affiliation/Organization: YGN Ethical Hacker Group

Time to Patch Stats

For vulnerabilities disclosed through this affiliation where we have sufficient data to calculate the time to patch (36 vulns), the following statistics apply:

Min Time To Patch:	2 days
Avg Time To Patch:	54 days
Max Time To Patch:	447 days

Other Affiliations

Creditees Affiliated with YGN Ethical Hacker Group have also affiliated with:

Website: http://yehg.net

Creditees currently or formerly associated with YGN Ethical Hacker Group (3):
(ordered by association date)

Known Since	Name	Vulns Through Affiliation
2007-12-01	Aung Khant	222
2008-03-01	br0	1
2011-06-27	Myo Soe	9

Disclosed Vulnerabilities (232):

Discl. Date	OSVDB ID	CVE ID	Creditees	Title
2013-02-11	90090		Myo Soe	Huawei Mobile Partner Installation Permission Weakness Local Privilege Escalation
2013-01-07	89409		Aung Khant	TomatoCart /admin/tocdesktop.php Token Object Multiple Admin Action CSRF
2013-01-04	88917		Aung Khant	TomatoCart /admin/json.php File Creation Arbitrary Code Execution
2013-01-01	88904		Aung Khant	CubeCart index.php Multiple Parameter XSS
2012-12-28	88821		Aung Khant	CubeCart Predictable File Name Generation Backup Configuration File Disclosure
2012-12-25	88771		Aung Khant	Open-Realty /admin/ajax.php Multiple Parameter XSS
2012-12-25	88864		Aung Khant	Open-Realty /admin/ajax.php Password Manipulation CSRF
2012-12-24	88743		Aung Khant	CubeCart admin.php redir Parameter Arbitrary Site Redirection
2012-12-24	88740		Aung Khant	CubeCart index.php Referer HTTP Header XSS
2012-12-24	88738		Aung Khant	CubeCart admin.php Multiple Function CSRF
2012-12-24	88742		Aung Khant	CubeCart index.php Multiple Parameter Arbitrary Site Redirect
2012-12-24	88741		Aung Khant	CubeCart admin.php Multiple Parameter XSS
2012-12-24	88739		Aung Khant	CubeCart admin.php Multiple Parameter SQL Injection
2012-12-24	88737		Aung Khant	CubeCart admin.php loc Parameter Local File Inclusion
2012-12-24	88736		Aung Khant	CubeCart Persistent Setup Directory Remote Privilege Escalation
2012-12-22	88673		Aung Khant	CubeCart /admin/categories/languages.php cat_master_id Parameter XSS
2012-12-22	88675		Aung Khant	CubeCart /admin/docs/home.php Multiple Parameter XSS
2012-12-22	88676		Aung Khant	CubeCart /admin/docs/languages.php doc_master_id Parameter XSS
2012-12-22	88677		Aung Khant	CubeCart /admin/docs/siteDocs.php FCKeditor Parameter XSS
2012-12-22	88678		Aung Khant	CubeCart /admin/filemanager/upload.php filename Parameter XSS
2012-12-22	88679		Aung Khant	CubeCart /admin/index.php User-Agent HTTP Header XSS
2012-12-22	88680		Aung Khant	CubeCart /admin/modules/affiliate/* Multiple Parameter XSS
2012-12-22	88681		Aung Khant	CubeCart /admin/modules/gateway/AsianPay/index.php Multiple Parameter XSS
2012-12-22	88682		Aung Khant	CubeCart /admin/modules/gateway/* Multiple Parameter XSS
2012-12-22	88683		Aung Khant	CubeCart /admin/modules/shipping/* Multiple Parameter XSS
2012-12-22	88684		Aung Khant	CubeCart /admin/products/extraCats.php Multiple Parameter XSS
2012-12-22	88685		Aung Khant	CubeCart /admin/products/index.php Multiple Parameter XSS
2012-12-22	88686		Aung Khant	CubeCart /admin/products/languages.php prod_master_id Parameter XSS
2012-12-22	88687		Aung Khant	CubeCart /admin/products/options.php Multiple Parameter XSS
2012-12-22	88688		Aung Khant	CubeCart /admin/settings/currency.php Multiple Parameter XSS
2012-12-22	88689		Aung Khant	CubeCart /admin/settings/geo.php Multiple Parameter XSS
2012-12-22	88690		Aung Khant	CubeCart /cart.php HTTP Referer Header XSS
2012-12-22	88691		Aung Khant	CubeCart /index.php Multiple Parameter XSS
2012-12-22	88692		Aung Khant	CubeCart /admin/adminusers/permissions.php adminId Parameter XSS
2012-12-22	88693		Aung Khant	CubeCart /admin/categories/index.php cat_name Parameter XSS
2012-12-22	88674		Aung Khant	CubeCart /admin/customers/index.php Multiple Parameter XSS
2012-12-22	88730		Aung Khant	CubeCart /cube/admin/products/options.php masterProduct Parameter SQL Injection
2012-12-22	88729		Aung Khant	CubeCart /cube/admin/settings/currency.php active Parameter SQL Injection
2012-12-22	88728		Aung Khant	CubeCart /admin/filemanager/upload.php File Upload Arbitrary Code Execution
2012-12-22	88727		Aung Khant	CubeCart /cube/admin/products/extraCats.php add Parameter SQL Injection
2012-12-22	88726		Aung Khant	CubeCart /cube/admin/products/index.php Multiple Parameter SQL Injection
2012-11-17	87798		Aung Khant	Open-Realty Multiple Admin Function CSRF
2012-10-20	86565		Aung Khant	F5 FirePass SSL VPN my.activation.cns.php3 refreshURL Parameter Arbitrary Site Redirect
2012-10-15	88076		Aung Khant	SilverStripe CMS /index.php/Security/login BackURL Parameter Arbitrary Site Redirect
2012-10-15	88075		Aung Khant	SilverStripe CMS /index.php/admin/security/EditForm/field/Roles/AddForm Title Parameter XSS
2012-10-15	88074		Aung Khant	SilverStripe CMS /index.php/admin/RootForm Title Parameter XSS
2012-09-04	86580		Aung Khant	F5 FirePass my.activation.cns.php3 refreshURL Parameter XSS
2012-08-22	85538		Myo Soe	FileZilla Process Memory Plaintext Credential Information Disclosure
2012-08-22	85534		Myo Soe	zFTP Server Process Memory Plaintext Credential Information Disclosure
2012-08-22	85537		Myo Soe	Tencent QQ Process Memory Plaintext Credential Information Disclosure
2012-08-22	85535		Myo Soe	pfingoTalk Process Memory Plaintext Credential Information Disclosure
2012-08-22	85536		Myo Soe	Apple iTunes Process Memory Plaintext Credential Local Disclosure
2012-08-22	85533		Myo Soe	Pidgin Process Memory Plaintext Credential Local Disclosure
2012-08-19	88069		Aung Khant	ocPortal /adminzone/index.php Admin User Creation CSRF
2012-08-19	88068		Aung Khant	ocPortal Session ID Brute Force Weakness
2012-05-20	82431		Aung Khant	Acuity CMS /admin/file_manager/browse.asp path Parameter Traversal Arbitrary File Access
2012-05-20	82430		Aung Khant	Acuity CMS /admin/file_manager/file_upload_submit.asp Multiple Parameter File Upload ASP Code Execution
2012-04-17	81198	2012-4745	Aung Khant	Acuity CMS admin/login.asp UserName Parameter XSS
2012-04-15	81183		Aung Khant	Fastpath WebChat webapp/agentinfo.jsp Multiple Parameter XSS
2012-04-15	81195		Aung Khant	Beatz Component for Joomla! index.php Multiple Parameter XSS
2012-04-15	81184		Aung Khant	Fastpath WebChat webapp/chat-ended.jsp workgroup Parameter XSS
2012-04-15	81185		Aung Khant	Fastpath WebChat webapp/chatmain.jsp Multiple Parameter XSS
2012-04-15	81186		Aung Khant	Fastpath WebChat webapp/chatroom.jsp Multiple Parameter XSS
2012-04-15	81187		Aung Khant	Fastpath WebChat webapp/contact-agent.jsp email Parameter XSS
2012-04-15	81188		Aung Khant	Fastpath WebChat webapp/email/leave-a-message.jsp workgroup Parameter XSS
2012-04-15	81189		Aung Khant	Fastpath WebChat webapp/email/offline-mail.jsp workgroup Parameter XSS
2012-04-15	81190		Aung Khant	Fastpath WebChat webapp/queue_updater.jsp Multiple Parameter XSS
2012-04-15	81191		Aung Khant	Fastpath WebChat webapp/style.jsp workgroup Parameter XSS
2012-04-15	81192		Aung Khant	Fastpath WebChat webapp/transcriptmain.jsp Multiple Parameter XSS
2012-04-15	81193		Aung Khant	Fastpath WebChat webapp/transcriptsrc.jsp Multiple Parameter XSS
2012-03-05	79827	2012-1110	Aung Khant	Etano join.php Multiple Parameter XSS
2012-03-05	79828	2012-1110	Aung Khant	Etano search.php Multiple Parameter XSS
2012-03-05	79829	2012-1110	Aung Khant	Etano photo_search.php Multiple Parameter XSS
2012-03-05	79830	2012-1110	Aung Khant	Etano photo_view.php return Parameter XSS
2012-03-05	80081	2012-1112	Aung Khant	Open Realty index.php select_users_template Parameter Traversal Local File Inclusion
2012-02-20	79638	2012-0872	Maciej Gojny Aung Khant	OxWall /join Multiple Parameter XSS
2012-02-20	79639	2012-0872	Aung Khant	OxWall /contact Multiple Parameter XSS
2012-02-20	79640	2012-0872	Aung Khant	OxWall /blogs/browse-by-tag tag Parameter XSS
2012-02-20	79641	2012-0872	Aung Khant	OxWall /viewlist URI XSS
2012-02-20	79602	2012-0873	Aung Khant	Dolphin viewFriends.php Multiple Parameter XSS
2012-02-19	79375	2012-0865	Aung Khant	CubeCart Multiple Script redir Parameter Arbitrary Site Redirect
2012-02-11	79141	2012-0865	Aung Khant	CubeCart admin/login.php goto Parameter Arbitrary Site Redirect
2012-02-11	79140	2012-0865	Aung Khant	CubeCart switch.php r Parameter Arbitrary Site Redirect
2011-10-24	76482		Myo Soe	zFTPServer CWD / STAT Command Parsing Remote DoS
2011-10-05	76138	2011-4559	Aung Khant	vtiger CRM index.php onlyforuser Parameter SQL Injection
2011-10-04	76005	2011-4670	Aung Khant	vtiger CRM index.php Multiple Parameter XSS
2011-10-04	76006	2011-4670	Aung Khant	vtiger CRM phprint.php Multiple Parameter XSS
2011-09-26	74043	2011-2710	Aung Khant	Joomla! index.php Multiple Parameter XSS
2011-08-26	74819		Aung Khant	Jcow index.php g Parameter XSS
2011-08-26	75481		Aung Khant	Jcow index.php attachment Parameter Arbitrary PHP Code Execution
2011-08-15	74543		Aung Khant	Elgg tag_names Parameter SQL Error Message Information Disclosure
2011-08-13	74502	2011-2917	Aung Khant	Mambo CMS administrator/index2.php zorder Parameter SQL Injection
2011-08-13	76618	2011-2934	Aung Khant	WebsiteBaker /admin/users/add.php Admin Addition CSRF
2011-08-13	76619	2011-2933	Aung Khant	WebsiteBaker /admin/media/upload.php Arbitrary File Upload
2011-07-30	74194		Aung Khant	Elgg mod/file/search.php page_owner Parameter XSS
2011-07-30	74195		Aung Khant	Elgg mod/riverdashboard/index.php content Parameter XSS
2011-07-30	74196		Aung Khant	Elgg engine/handlers/pagehandler.php Multiple Parameter XSS
2011-06-29	73491	2011-2509	Aung Khant	Joomla! index.php Multiple Parameter XSS
2011-06-28	73488		Aung Khant	Joomla! com_content Component index.php Multiple Parameter Path Disclosure
2011-06-27	74355		Myo Soe	smallftpd Connection Saturation Remote DoS
2011-06-27	74503		Aung Khant	Mambo CMS Content Component (com_content) index.php task Parameter XSS
2011-06-27	74504		Aung Khant	Mambo CMS Menu Manager Component (com_menumanager) administrator/index2.php menu Parameter XSS
2011-06-27	74505		Aung Khant	Mambo CMS Menus Component (com_menus) administrator/index2.php menutype Parameter XSS
2011-06-27	74506		Aung Khant	Mambo CMS administrator/index2.php Multiple Parameter XSS
2011-06-27	74507		Aung Khant	Mambo CMS Modules Component (com_modules) administrator/index2.php client Parameter XSS
2011-06-27	74508		Aung Khant	Mambo CMS Categories Component (com_categories) administrator/index2.php section Parameter XSS
2011-05-20	72431		Aung Khant	phpMyAdmin index.php db Parameter XSS
2011-03-25	74351		Aung Khant	Parallels Plesk at_domains_index.html Query String Parameter Arbitrary Site Redirect
2011-03-23	73335	2011-1480	Aung Khant	PHP-Nuke admin.php chng_uid Parameter SQL Injection
2011-03-23	73336	2011-1482	Aung Khant	PHP-Nuke mainfile.php HTTP_REFERER Check CSRF
2011-03-23	74501		Aung Khant	PHP-Nuke Feedback Module Multiple Parameter XSS
2011-03-18	71228		Aung Khant	XOOPS /modules/system/admin.php Multiple Parameter XSS
2011-03-13	71133	2011-1150	Aung Khant	bbPress bb-login.php re Parameter XSS
2011-02-25	73516		Aung Khant	PHPShop index.php page Parameter XSS
2011-02-01	70751	2011-0535	Aung Khant	Zikula Application Framework User Permissions Modification CSRF
2011-02-01	75741	2011-3703	Aung Khant	AneCMS Multiple Script Direct Request Path Disclosure
2011-02-01	75742	2011-3704	Aung Khant	appRain Multiple Script Direct Request Path Disclosure
2011-02-01	75745	2011-3708	Aung Khant	Automne Multiple Script Direct Request Path Disclosure
2011-01-31	75734	2011-3696	Aung Khant	60cycleCMS Multiple Script Direct Request Path Disclosure
2011-01-31	75735	2011-3697	Aung Khant	Achievo Multiple Script Direct Request Path Disclosure
2011-01-31	75739	2011-3701	Aung Khant	AlegroCart Multiple Script Direct Request Path Disclosure
2011-01-31	75894	2011-3801	Aung Khant	SimpleTest Multiple Script Direct Request Path Disclosure
2011-01-30	75733	2011-3695	Aung Khant	111WebCalendar Multiple Script Direct Request Path Disclosure
2011-01-30	75747	2011-3710	Aung Khant	bbPress Multiple Script Direct Request Path Disclosure
2011-01-30	75821	2011-3747	Aung Khant	Joomla! Multiple Script Direct Request Path Disclosure
2011-01-28	75906	2011-3818	Aung Khant	WordPress Multiple Script Direct Request Path Disclosure
2011-01-27	75869	2011-3781	Aung Khant	PHPIDS Multiple Script Direct Request Path Disclosure
2011-01-27	75872	2011-3784	Aung Khant	PHP-Nuke Multiple Script Direct Request Path Disclosure
2011-01-27	75874	2011-3786	Aung Khant	PHProjekt htdocs/Setup/Controllers/IndexController.php Direct Request Path Disclosure
2011-01-27	70677	2011-0526	Aung Khant	Vanilla Forums index.php Target Parameter XSS
2011-01-22	75765	2011-3729	Aung Khant	dotProject Multiple Script Direct Request Path Disclosure
2011-01-22	75860	2011-3772	Aung Khant	phpCollab Multiple Script Direct Request Path Disclosure
2011-01-22	75870	2011-3782	Aung Khant	phpLD Multiple Script Direct Request Path Disclosure
2011-01-22	75873	2011-3785	Aung Khant	PHP Point Of Sale (POS) Multiple Script Direct Request Path Disclosure
2011-01-22	75885	2011-3797	Aung Khant	ProjectPier Multiple Script Direct Request Path Disclosure
2011-01-22	75896	2011-3803	Aung Khant	SugarCRM Multiple Script Direct Request Path Disclosure
2011-01-22	75899	2011-3811	Aung Khant	TomatoCart Multiple Script Direct Request Path Disclosure
2011-01-21	75851	2011-3763	Aung Khant	OpenCart Multiple Script Direct Request Path Disclosure
2011-01-21	75854	2011-3766	Aung Khant	OrangeHRM Multiple Script Direct Request Path Disclosure
2011-01-21	75855	2011-3767	Aung Khant	osCommerce redirect.php Direct Request Path Disclosure
2011-01-21	75743	2011-3706	Aung Khant	ATutor Multiple Script Direct Request Path Disclosure
2011-01-21	75750	2011-3713	Aung Khant	cFTP Multiple Script Direct Request Path Disclosure
2011-01-21	75754	2011-3717	Aung Khant	ClipBucket Multiple Script Direct Request Path Disclosure
2011-01-21	75756	2011-3719	Aung Khant	CodeIgniter Multiple Script Direct Request Path Disclosure
2011-01-21	75817	2011-3742	Aung Khant	HelpCenter Live Multiple Script Direct Request Path Disclosure
2011-01-21	75818	2011-3743	Aung Khant	Hesk Multiple Script Direct Request Path Disclosure
2011-01-21	75871	2011-3783	Aung Khant	phpMyFAQ Multiple Script Direct Request Path Disclosure
2011-01-21	75876	2011-3788	Aung Khant	PhpSecInfo Multiple Script Direct Request Path Disclosure
2011-01-21	75884	2011-3796	Aung Khant	PrestaShop Multiple Script Direct Request Path Disclosure
2011-01-21	75892	2011-3809	Aung Khant	TheHostingTool Multiple Script Direct Request Path Disclosure
2011-01-20	75763	2011-3727	Aung Khant	DokuWiki Multiple Script Direct Request Path Disclosure
2011-01-20	75849	2011-3761	Aung Khant	NuSOAP Multiple Script Direct Request Path Disclosure
2011-01-20	75856	2011-3768	Aung Khant	Phorum Multiple Script Direct Request Path Disclosure
2011-01-20	75902	2011-3814	Aung Khant	WebCalendar Multiple Script Direct Request Path Disclosure
2011-01-20	75738	2011-3700	Aung Khant	Advanced Electron Forum Multiple Script Direct Request Path Disclosure
2011-01-20	75764	2011-3728	Aung Khant	Dolphin Multiple Script Direct Request Path Disclosure
2011-01-20	75804	2011-3733	Aung Khant	Elgg Multiple Script Direct Request Path Disclosure
2011-01-20	75820	2011-3746	Aung Khant	Jcow Multiple Script Direct Request Path Disclosure
2011-01-20	75833	2011-3759	Aung Khant	MyBB Multiple Script Direct Request Path Disclosure
2011-01-20	75900	2011-3812	Aung Khant	Vanilla Multiple Script Direct Request Path Disclosure
2011-01-20	75909	2011-3821	Aung Khant	xajax Multiple Script Direct Request Path Disclosure
2011-01-19	75850	2011-3762	Aung Khant	OpenBlog Multiple Script Direct Request Path Disclosure
2011-01-19	75881	2011-3793	Aung Khant	Pixie CMS Multiple Script Direct Request Path Disclosure
2011-01-19	75905	2011-3817	Aung Khant	WebsiteBaker Multiple Script Direct Request Path Disclosure
2011-01-19	75744	2011-3707	Aung Khant	JanRain PHP OpenID Library Multiple Script Direct Request Path Disclosure
2011-01-19	75755	2011-3718	Aung Khant	CMS Made Simple Multiple Script Direct Request Path Disclosure
2011-01-19	75758	2011-3721	Aung Khant	concrete Multiple Script Direct Request Path Disclosure
2011-01-19	75812	2011-3737	Aung Khant	eyeOS Multiple Script Direct Request Path Disclosure
2011-01-19	75828	2011-3754	Aung Khant	Mambo Multiple Script Direct Request Path Disclosure
2011-01-19	75877	2011-3789	Aung Khant	phpwcms Multiple Script Direct Request Path Disclosure
2011-01-19	75882	2011-3794	Aung Khant	Pligg Multiple Script Direct Request Path Disclosure
2011-01-19	75893	2011-3800	Aung Khant	Serendipity Multiple Script Direct Request Path Disclosure
2011-01-19	75910	2011-3822	Aung Khant	XOOPS Multiple Script Direct Request Path Disclosure
2011-01-19	75914	2011-3825	Aung Khant	Zend Framework / Server Multiple Script Direct Request Path Disclosure
2011-01-19	75915	2011-3826	Aung Khant	Zikula Multiple Script Direct Request Path Disclosure
2011-01-18	75848	2011-3760	Aung Khant	Nucleus Multiple Script Direct Request Path Disclosure
2011-01-18	75825	2011-3751	Aung Khant	LifeType Multiple Script Direct Request Path Disclosure
2011-01-14	83011		Aung Khant	Drupal Multiple Admin Function XSS
2011-01-05	70369	2011-0005	Aung Khant	com_search Module for Joomla! index.php ordering Parameter XSS
2011-01-04	70245	2011-4942 2011-5159	Aung Khant	Geeklog admin/configuration.php Multiple Parameter XSS
2010-12-24	70013	2010-5096	Aung Khant	MyBB search.php keywords Parameter SQL Injection
2010-12-24	70014	2010-5096	Aung Khant	MyBB private.php keywords Parameter SQL Injection
2010-12-20	69979	2010-4522	Aung Khant	MyBB member.php url Parameter XSS
2010-12-20	69980	2010-4522	Aung Khant	MyBB newreply.php posthash Parameter XSS
2010-12-20	70279	2010-4522	Aung Khant	MyBB editpost.php Unspecified Parameter XSS
2010-11-17	69266	2010-4647	Aung Khant	Eclipse Help Server help/index.jsp URI XSS
2010-11-16	69267	2010-4647	Aung Khant	Eclipse Help Server help/advanced/content.jsp URI XSS
2010-11-05	69026	2010-4166 2010-4696 2011-1151	Aung Khant	Joomla index.php Multiple Parameter SQL Injection
2010-10-09	68625	2010-3712	Aung Khant	Joomla! index.php Query String Parameter XSS
2010-09-14	68014		Aung Khant	ALZip Path Subversion Arbitrary DLL Injection Code Execution
2010-09-14	68017	2010-5205 2010-5206	Aung Khant	e-press ONE Office Multiple Product Path Subversion Arbitrary DLL Injection Code Execution
2010-09-14	68013	2010-5208	Aung Khant	Kingsoft Office 2010 Path Subversion Arbitrary DLL Injection Code Execution
2010-09-13	68012	2010-5210	Aung Khant	Sorax Reader Path Subversion Arbitrary DLL Injection Code Execution
2010-09-13	68011	2010-5209	Aung Khant	Nuance PDF Reader Path Subversion Arbitrary DLL Injection Code Execution
2010-09-13	68010	2010-5204	Aung Khant	IBM Lotus Symphony Path Subversion Arbitrary DLL Injection Code Execution
2010-09-13	67977		Aung Khant	Microsoft Visual C++ Redistributable Path Subversion Arbitrary DLL Injection Code Execution
2010-09-13	68118	2010-5211	Aung Khant	ALSee Path Subversion Arbitrary DLL Injection Code Execution
2010-09-13	68374		Aung Khant	Nitro PDF Reader Path Subversion Arbitrary DLL Injection Code Execution
2010-09-12	68015		Aung Khant	ALShow Path Subversion Arbitrary DLL Injection Code Execution
2010-09-12	67995	2010-3402	Aung Khant	UltraEdit Path Subversion Arbitrary DLL Injection Code Execution
2010-09-10	68736	2010-3976	Aung Khant	Adobe Flash Player (IE Version) Path Subversion Arbitrary DLL Injection Code Execution
2010-09-02	67782	2010-3397	Aung Khant	Symantec PGP Desktop Path Subversion Arbitrary DLL Injection Code Execution
2010-09-01	67781	2010-5196 2010-5200	Aung Khant	KeePass Password Safe Path Subversion Arbitrary DLL Injection Code Execution
2010-08-29	67694	2010-5246	Aung Khant	Maxthon Browser Path Subversion Arbitrary DLL Injection Code Execution
2010-08-28	68858		Aung Khant	Notepad++ Path Subversion Arbitrary DLL Injection Code Execution
2010-08-26	67575		Aung Khant	BlastChat Client Component for Mambo / Joomla! (com_blastchatc) index.php Itemid Parameter XSS
2010-08-26	67591		Aung Khant kalyan	Apple QuickTime PictureViewer Path Subversion Arbitrary DLL Injection Code Execution
2010-08-20	67316	2010-3056	Aung Khant	phpMyAdmin db_search.php field_str Parameter XSS
2010-08-20	67317	2010-3056	Aung Khant	phpMyAdmin db_sql.php delimiter Parameter XSS
2010-08-20	67318	2010-3056	Aung Khant	phpMyAdmin db_structure.php sort Parameter XSS
2010-08-20	67319	2010-3056	Aung Khant	phpMyAdmin js/messages.php db Parameter XSS
2010-08-20	67320	2010-3056	Aung Khant	phpMyAdmin server_databases.php sort_by Parameter XSS
2010-08-20	67321	2010-3056	Aung Khant	phpMyAdmin server_privileges.php Multiple Parameter XSS
2010-08-20	67322	2010-3056	Aung Khant	phpMyAdmin setup/config.php DefaultLang Parameter XSS
2010-08-20	67323	2010-3056	Aung Khant	phpMyAdmin sql.php Multiple Parameter XSS
2010-08-20	67324	2010-3056	Aung Khant	phpMyAdmin tbl_replace.php fields[multi_edit][] Parameter XSS
2010-08-09	67165		Aung Khant	2Wire Broadband Gateway Insecure Session ID Generation
2010-04-25	64146	2010-1586	Aung Khant	HP System Management Homepage (SMH) red2301.html RedirectUrl Parameter Arbitrary Site Redirect
2009-12-01	56579	2010-4879	Aung Khant	dompdf dompdf.php input_file Parameter Traversal Arbitrary File Access
2009-07-27	56602		Aung Khant	TinyBrowser upload.php Multiple Parameter XSS
2009-07-27	56603		Aung Khant	TinyBrowser Uploaded File Deletion CSRF
2009-07-23	62159		Aung Khant	PHP Support Tickets include/config.php tri_debug Parameter Error Message Path Disclosure
2009-07-23	62160		Aung Khant	PHP Support Tickets classes/class.phpmailer.php PHPMailer Class Remote Code Execution
2009-07-23	62158		Aung Khant	PHP Support Ticket Unspecified Config File Overwrite Remote DoS
2008-07-28	47486	2008-3456	Aung Khant	phpMyAdmin setup.php Cross-Frame Scripting
2008-07-28	47487	2008-3457	Aung Khant	phpMyAdmin setup.php Configuration Manipulation Based XSS
2008-07-15	47321	2008-3197	Aung Khant	phpMyAdmin db_create.php db Parameter CSRF
2008-07-15	47322	2008-3197	Aung Khant	phpMyAdmin index.php Multiple Parameter CSRF
2008-03-01	66884		Aung Khant	Gmail-Lite compose.php Arbitrary Mail Relay
2008-03-01	66886		br0	Gmail-Lite Unrestricted File Upload Arbitrary Code Execution
2008-01-01	66885		Aung Khant	Gmail-Lite Unspecified XSS
2007-12-01	61995		Aung Khant	CodeIgniter user_agent Global XSS Filter Bypass

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

Creditees currently or formerly associated with YGN Ethical Hacker Group (3):(ordered by association date)

Disclosed Vulnerabilities (232):

Creditees currently or formerly associated with YGN Ethical Hacker Group (3):
(ordered by association date)