rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-4331 
Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4332 
SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4333 
Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4334 
PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4335 
SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apa_album_ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4336 
Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apa_album_ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4337 
Cross-site scripting (XSS) vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to (1) edit.php and (2) list.php in articles/; (3) list_blogs.php and (4) rankings.php in blogs/; (5) calendar/index.php; (6) calendar.php, (7) index.php, and (8) list_events.php in events/; (9) index.php and (10) list_galleries.php in fisheye/; (11) liberty/list_content.php; (12) newsletters/edition.php; (13) pigeonholes/list.php; (14) recommends/index.php; (15) rss/index.php; (16) stars/index.php; (17) users/remind_password.php; (18) wiki/orphan_pages.php; and (19) stats/index.php, different vectors than CVE-2007-0526 and CVE-2005-4379.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4338 
SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliant_gallery" permissions to execute arbitrary SQL commands via the (1) nid, (2) qid, (3) state, and possibly (4) user parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4339 
Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava* binaries."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4340 
Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an HTML document containing a carriage return ("\r\n\r\n") argument to the window.open function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4341 
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4342 
NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4343 
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) SaveToTempFile, or (3) AppendBinary method.  NOTE: this issue might only be exploitable in limited environments or non-default browser settings.  NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4344 
SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4345 
SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4346 
Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to comments.php, a different vector than CVE-2008-3371.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4347 
SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4348 
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4349 
Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) page parameter in a details action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4350 
SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4351 
Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4352 
SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4353 
SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. NOTE: although one component of Linkarity is distributable PHP code, this issue might be site-specific. If so, it should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4354 
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4355 
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4356 
Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News module; (2) the vid parameter to index.php in a Result action to the Voting module; (3) the fid parameter to index.php in a ShowForum action to the Forum module; (4) the tid parameter to index.php in a ShowTopic action to the Forum module; (5) the uname parameter to index.php in a UserInfo action to the Account module; or (6) the module parameter to index.php, probably related to the TopSites module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4357 
SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4358 
Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T18:00:00.000Z
CVE-2008-4359 
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-03T17:18:00.000Z
CVE-2008-4360 
mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-03T17:18:00.000Z
CVE-2008-4361 
Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary files via a .. (dot dot) in the path parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T21:00:00.000Z
CVE-2008-4362 
The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to \Device\DLPTokenWalter0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T21:00:00.000Z
CVE-2008-4363 
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially execute arbitrary code via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T21:00:00.000Z
CVE-2008-4364 
SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T21:00:00.000Z
CVE-2008-4365 
Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T21:00:00.000Z
CVE-2008-4366 
Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T21:00:00.000Z
CVE-2008-4368 
The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension (JCE) key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4369 
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4370 
Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4371 
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4372 
Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4373 
SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4374 
SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4375 
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4376 
SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4377 
SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4378 
SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4379 
Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4380 
The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-01T15:00:00.000Z
CVE-2008-4381 
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-02T18:00:00.000Z
CVE-2008-4382 
Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-02T18:00:00.000Z
CVE-2008-4383 
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-03T22:00:00.000Z
CVE-2008-4384 
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-07T18:27:00.000Z
CVE-2008-4385 
Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T20:00:00.000Z
CVE-2008-4387 
Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T16:00:00.000Z
CVE-2008-4388 
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T16:00:00.000Z
CVE-2008-4389 
Symantec AppStream 5.2.x and Symantec Workspace Streaming (SWS) 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system, and execute these files, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2008-4390 
The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-09T00:00:00.000Z
CVE-2008-4391 
Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-09T00:00:00.000Z
CVE-2008-4392 
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-19T16:00:00.000Z
CVE-2008-4393 
Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to zodiac/servlet/zodiac.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-07T18:27:00.000Z
CVE-2008-4394 
Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-10T10:00:00.000Z
CVE-2008-4395 
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z
CVE-2008-4396 
Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via an executable with malformed version data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-02T19:00:00.000Z
CVE-2008-4397 
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T20:00:00.000Z