rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-5713 
The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-24T17:00:00.000Z
CVE-2008-5714 
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-24T17:00:00.000Z
CVE-2008-5715 
Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-24T17:00:00.000Z
CVE-2008-5716 
xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue exists because of erroneous set_permissions calls in the fix for CVE-2008-4405.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-24T17:00:00.000Z
CVE-2008-5717 
Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5718 
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5719 
Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-/C and Hitachi Groupmax Workflow - Development Kit for Active Server Pages before 06-52-/A allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5720 
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5721 
SapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote attackers to bypass authentication and obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5722 
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (preferences) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5723 
Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before 1.03 allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5724 
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5725 
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5726 
SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5727 
SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5728 
Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the system parameter in modules/netshop/post.php; and the INCLUDE_FOLDER parameter in (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, and (5) forum.inc.php in modules/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5729 
Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) form and (2) control parameters to FCKeditor/neditor.php, and the (3) path parameter to admin/siteinfo/iframe.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5730 
Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving (1) a %0a sequence in a cookie and (2) the add.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5731 
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5732 
Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5733 
SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5734 
Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T17:08:00.000Z
CVE-2008-5735 
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T18:00:00.000Z
CVE-2008-5736 
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T18:00:00.000Z
CVE-2008-5737 
SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T18:00:00.000Z
CVE-2008-5738 
Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T18:00:00.000Z
CVE-2008-5739 
SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T18:00:00.000Z
CVE-2008-5742 
Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the redirect parameter in a logoff action to modules/auth/index.php or (2) the url parameter to modules/linkmanager/redirect.php.  NOTE: this was reported within an "HTTP Response Splitting" section in the original disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T20:00:00.000Z
CVE-2008-5743 
pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T21:00:00.000Z
CVE-2008-5744 
Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-26T21:00:00.000Z
CVE-2008-5745 
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-5746 
Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-5747 
F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed.  NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-5748 
Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-5749 
Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.  NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch the applet even [if] you have given out the permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-5750 
Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-5751 
SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T17:00:00.000Z
CVE-2008-5752 
Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T17:00:00.000Z
CVE-2008-5753 
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the quick-connect bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T17:00:00.000Z
CVE-2008-5754 
Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-File) with a long second line, possibly a related issue to CVE-2008-5753.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T17:00:00.000Z
CVE-2008-5755 
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T17:00:00.000Z
CVE-2008-5756 
Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping (.cmap) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T17:00:00.000Z
CVE-2008-5757 
Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T19:00:00.000Z
CVE-2008-5758 
Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors related to private messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T19:00:00.000Z
CVE-2008-5759 
Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08_Files module.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T19:00:00.000Z
CVE-2008-5760 
Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T19:00:00.000Z
CVE-2008-5761 
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto parameter to photo.php in the 05_Foto module; or (3) the name parameter in an insertrecord action to index.php in the 08_Files module, as demonstrated by injection within a SRC attribute of an IFRAME element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5762 
Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5763 
PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5764 
PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5765 
WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5766 
SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5767 
SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5768 
SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5769 
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5770 
Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5771 
Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5772 
Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5773 
Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5774 
Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and the (2) iPro parameter to (c) detail.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5775 
SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5776 
Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) action parameter to admin.php and the (2) get parameter to index.php.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5777 
SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5778 
SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z
CVE-2008-5779 
SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-30T20:00:00.000Z