rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-2710 
Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2711 
Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2712 
Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2713 
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2714 
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2715 
The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2716 
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2717 
Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2718 
JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2719 
JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2720 
SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2721 
Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or web script via the subcat parameter.  NOTE: this issue might be resultant from SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2722 
SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2723 
Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags.  NOTE: a followup post indicated that the initial report could not be verified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2724 
Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a different vulnerability than CVE-2006-2227.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T01:00:00.000Z
CVE-2006-2725 
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2726 
PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config[fsBase] parameter in (1) drucken.php, (2) drucken2.php, (3) email_an_benutzer.php, (4) rechnung.php, (5) suche/search.php and (6) adminbereich/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2727 
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2728 
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2729 
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2730 
PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when register_globals is enabled, allows remote attackers to include arbitrary files via the GLOBALS[CLASS_PATH] parameter.  NOTE: this issue might be resultant from a global overwrite vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2731 
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) e_mesaj_yas.asp, (b) edi_haber.asp, and (c) haber_devam.asp; (2) hid parameter in (d) yazdir.asp and (e) yorum.asp, and the (3) e parameter in (f) arsiv.asp.  NOTE: with administrator credentials, additional vectors exist including (4) yid parameter to (g) admin/y_admin.asp, (5) bid parameter to (h) admin/reklam_detay.asp, hid parameter to (i) admin/detay_yorum.asp and (j) admin/haber_sil.asp, (6) kid parameter to (k) admin/kategori_d.asp, (7) tur parameter to (l) admin/haber_ekle.asp, (8) s parameter to (m) admin/e_mesaj_yaz.asp, and id parameter to (n) admin/admin_sil.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2732 
SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) yas_1, (2) yas_2, and (3) yas_3 parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2733 
membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2734 
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2735 
PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, as used with phpBB when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: This is a similar vulnerability to CVE-2006-2507.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2736 
PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: This is a similar vulnerability to CVE-2006-2507.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2737 
utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via the addDB action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2738 
The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2739 
PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the tinybb_footers parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2740 
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2741 
Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2742 
SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2743 
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2744 
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2745 
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2746 
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.  NOTE: vectors 2 and 3 might be resultant from file inclusion issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2747 
Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitrary files or execute PHP code via a .. (dot dot) sequence and trailing null (%00) byte in the subsite parameter in a showsubsite todo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2748 
SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the (1) type parameter in adminfunctions.php and the (2) catalogue_id parameter in editcatalogue.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2749 
SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2750 
Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries, which is reflected in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2751 
Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2752 
The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2753 
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T17:00:00.000Z
CVE-2006-2754 
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T17:00:00.000Z
CVE-2006-2755 
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2756 
Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET request.  NOTE: CVE analysis suggests that this is a different product, and therefore a different vulnerability, than CVE-2002-1897.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2757 
Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2758 
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.  NOTE: this might be the same issue as CVE-2005-3747.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2759 
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2760 
SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2761 
SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2762 
PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2763 
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  It is possible that this is primary to CVE-2006-2678.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2764 
Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an IMG tag in a comment field to (1) guestwrite.php or (2) guestbook.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2765 
Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to inject arbitrary web script or HTML via the flag parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2766 
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2767 
PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the default_path parameter in (1) error.php, (2) index.php, and (3) classes/main_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2768 
PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) system_path parameter in a large number of files in the (a) app/edocument/, (b) app/eproject/, (c) app/erek/, and (d) extension/ directories, and the (2) GLOBALS[system_path] parameter in (e) extension/sitemap/sitemap.datatype.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2769 
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2770 
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the "file" array parameter, as demonstrated by file[0].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2771 
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2772 
Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z