rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-2265 
SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the ida parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2266 
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function.  NOTE: this may be a CVE-2004-2265 regression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2267 
Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, or (7) .jar, then accessing it via a direct request to the file in modules/FileManager/postlet/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2268 
Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php.  NOTE: this is user-assisted because there is a delay and a notification before redirection occurs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2269 
AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastracker_admin cookie to TRUE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2270 
Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the (1) main_page_directory and (2) page_to_include parameters in template\index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2271 
The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the "access content" permission to list tables and obtain session IDs from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2272 
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2273 
Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2274 
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2275 
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2276 
Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2277 
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T10:00:00.000Z
CVE-2008-2278 
SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T10:00:00.000Z
CVE-2008-2279 
Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T10:00:00.000Z
CVE-2008-2280 
Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T10:00:00.000Z
CVE-2008-2281 
Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluated by a resource script when a user prints this document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2282 
admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the login_admin cookie to true.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2283 
IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEnhWMF methods in (a) the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll (aka IDAutomation Linear BarCode) 1.6.0.6, (b) the IDAuto.Datamatrix.1 ActiveX control in IDAutomationDMATRIX6.DLL (aka IDautomation Datamatrix Barcode) 1.6.0.6, (c) the IDAuto.PDF417.1 ActiveX control in IDAutomationPDF417_6.dll (aka IDautomation PDF417 Barcode) 1.6.0.6, and (d) the IDAuto.Aztec.1 ActiveX control in IDAutomationAZTEC.dll (aka IDautomation Aztec Barcode) 1.7.1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2284 
PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOX_APPLICATION_PATH parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2285 
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2286 
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2287 
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2288 
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2289 
Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2290 
Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2291 
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2292 
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2293 
admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2294 
Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "admin."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2295 
Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the s_text parameter and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2296 
PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2297 
The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "<?php" or "?>", which is present in the password file and probably passes an insufficient comparison.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2298 
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2299 
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2300 
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2301 
SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) top_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-18T14:00:00.000Z
CVE-2008-2302 
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-23T15:00:00.000Z
CVE-2008-2303 
Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-14T18:00:00.000Z
CVE-2008-2304 
Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string XML element that contains many characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-14T18:00:00.000Z
CVE-2008-2305 
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-2306 
Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T20:00:00.000Z
CVE-2008-2307 
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T20:00:00.000Z
CVE-2008-2308 
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-01T17:00:00.000Z
CVE-2008-2309 
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht or (2) .xhtm file, which does not trigger a "potentially unsafe" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-01T18:00:00.000Z
CVE-2008-2310 
Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string in (1) C++ or (2) Java source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-01T18:00:00.000Z
CVE-2008-2311 
Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-01T18:00:00.000Z
CVE-2008-2312 
Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-2313 
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-01T18:00:00.000Z
CVE-2008-2314 
Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-01T18:00:00.000Z
CVE-2008-2315 
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-01T14:00:00.000Z
CVE-2008-2316 
Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-01T14:00:00.000Z
CVE-2008-2317 
WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-14T18:00:00.000Z
CVE-2008-2318 
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-14T18:00:00.000Z
CVE-2008-2320 
Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T01:00:00.000Z
CVE-2008-2321 
Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unknown vectors involving "processing of arguments."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T01:00:00.000Z
CVE-2008-2322 
Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a long Type 1 font, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T01:00:00.000Z
CVE-2008-2323 
Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource consumption) via crafted textual content in messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T01:00:00.000Z
CVE-2008-2324 
The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T01:00:00.000Z
CVE-2008-2325 
QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office file, related to insufficient "bounds checking."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T01:00:00.000Z
CVE-2008-2326 
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-10T16:00:00.000Z
CVE-2008-2327 
Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-27T20:00:00.000Z
CVE-2008-2329 
Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-2330 
slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z