rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-6615 
SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advanced_search_result page.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T18:00:00.000Z
CVE-2008-6616 
Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T18:00:00.000Z
CVE-2008-6617 
Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T18:00:00.000Z
CVE-2008-6618 
Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacher_id parameter in (1) class/HomepageMain.php and (2) class/HomepageTop.php, and (3) the message_id parameter in class/MessageReply.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T18:00:00.000Z
CVE-2008-6619 
Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T18:00:00.000Z
CVE-2008-6620 
Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php in GraFX miniCWB 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errcontext, (2) _GET, (3) _POST, (4) _SESSION, (5) _SERVER, and (6) fckphp_config[Debug_SERVER] parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T18:00:00.000Z
CVE-2008-6621 
Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors in DPX images.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6622 
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6623 
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6624 
SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6625 
SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6626 
SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6627 
SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6629 
Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T21:00:00.000Z
CVE-2008-6630 
Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6631 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than CVE-2008-0679.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6632 
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6633 
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resaopen.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6634 
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6635 
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir_inc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6636 
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir_edge_skins parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6637 
Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6638 
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6639 
Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the update_user_pwd action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6640 
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2) profil.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6641 
Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the (4) username or (5) password fields to yonet/default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6642 
SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6643 
LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTION parameter in a direct request to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6644 
Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6645 
Cross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header ($_SERVER ['HTTP_USER_AGENT']), which is not properly handled when displaying log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6646 
Cross-site scripting (XSS) vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6647 
SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6648 
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php.  NOTE: this might be the same issue as CVE-2008-6647.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6649 
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6650 
del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a different vulnerability than CVE-2008-4628.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6651 
Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6652 
SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6653 
SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6654 
Cross-site scripting (XSS) vulnerability in search_results.php in InfoBiz Server allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6655 
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the (1) nom_branche and (2) nom parameters to php/prenom.php; the (3) nom_branche parameter to php/index.php; and the (4) nom_branche, (5) nom, and (6) prenom parameters to php/info.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6656 
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T10:00:00.000Z
CVE-2008-6657 
Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T19:00:00.000Z
CVE-2008-6658 
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action, as demonstrated by a predictable package filename in attachments/ that was uploaded through a post2 action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T19:00:00.000Z
CVE-2008-6659 
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during a jsoption action, related to Sources/QueryString.php and Sources/Themes.php, as demonstrated by a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T19:00:00.000Z
CVE-2008-6660 
Unrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a .sql extension, then accessing this file via a direct request.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T19:00:00.000Z
CVE-2008-6661 
Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T23:00:00.000Z
CVE-2008-6662 
AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-07T23:00:00.000Z
CVE-2008-6663 
SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the auction_id parameter, a different vector than CVE-2009-0106.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6664 
action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6665 
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6666 
Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo.  NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6667 
A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6668 
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) id parameter to comm.php and (2) var_filename parameter to viewrq.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6669 
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6670 
Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet to UDP port 27960.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6671 
Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted join packet to UDP port 27960.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6672 
Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime error") via a crafted join packet to UDP port 27960, probably related to an invalid nickname command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6673 
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1) change the admin password via the cSaveAdminPW action; (2) modify site information, such as the contact address, via the saveAdmin; and (3) modify the site design via the saveDesign action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6674 
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6675 
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6676 
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6677 
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6678 
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T10:00:00.000Z
CVE-2008-6679 
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T16:00:00.000Z
CVE-2008-6680 
libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-08T16:00:00.000Z
CVE-2008-6681 
Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-09T15:00:00.000Z
CVE-2008-6682 
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-09T15:00:00.000Z