rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-6273 
SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-6274 
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-6275 
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-24T11:00:00.000Z
CVE-2012-6276 
Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-26T21:00:00.000Z
CVE-2012-6277 
Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."
Problem types: description: Other
Affected products: vendor: n/a
product: Autonomy KeyView IDOL
Published: 2020-02-21T16:50:17.000Z
CVE-2012-6290 
SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/.  NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-11T15:00:00.000Z
CVE-2012-6297 
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T17:01:25.000Z
CVE-2012-6298 
Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to execute arbitrary commands or modify data via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-26T20:00:00.000Z
CVE-2012-6299 
Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attackers to bypass intended access restrictions via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-26T20:00:00.000Z
CVE-2012-6301 
The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted market: URI in the SRC attribute of an IFRAME element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-10T20:00:00.000Z
CVE-2012-6302 
Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-24T14:08:08.000Z
CVE-2012-6303 
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-28T22:00:00.000Z
CVE-2012-6306 
A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T17:18:01.000Z
CVE-2012-6307 
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T17:31:02.000Z
CVE-2012-6309 
A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malicious user cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T17:36:29.000Z
CVE-2012-6312 
Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a video-lead-form action to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-11T11:00:00.000Z
CVE-2012-6313 
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-11T11:00:00.000Z
CVE-2012-6314 
Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-26T22:00:00.000Z
CVE-2012-6316 
Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the (1) username or (2) pwd parameter to userRpm/NoipDdnsRpm.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-30T14:00:00.000Z
CVE-2012-6324 
Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-21T21:00:00.000Z
CVE-2012-6325 
VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-21T21:00:00.000Z
CVE-2012-6326 
VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-22T20:00:00.000Z
CVE-2012-6329 
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-04T21:00:00.000Z
CVE-2012-6330 
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-04T21:00:00.000Z
CVE-2012-6333 
Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-13T11:00:00.000Z
CVE-2012-6334 
The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T11:00:00.000Z
CVE-2012-6335 
The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T11:00:00.000Z
CVE-2012-6336 
The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T11:00:00.000Z
CVE-2012-6337 
The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T11:00:00.000Z
CVE-2012-6339 
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow (2) remote authenticated administrators to inject arbitrary web script or HTML via a Messages field to the servermanager program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T11:00:00.000Z
CVE-2012-6340 
An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T17:54:33.000Z
CVE-2012-6341 
An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T18:17:25.000Z
CVE-2012-6342 
Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers to hijack the authentication of administrators for requests that logout the user via a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-13T14:00:00.000Z
CVE-2012-6344 
Novell ZENworks Configuration Management before 11.2.4 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-25T18:31:39.000Z
CVE-2012-6345 
Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-25T18:34:15.000Z
CVE-2012-6346 
Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expression/validate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-09T22:00:00.000Z
CVE-2012-6347 
Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to (1) admin/auditTrail.jsf, (2) mapolicymgmt/targetsMonitorView.jsf, (3) vascan/globalsummary.jsf, (4) vaerrorlog/vaErrorLog.jsf, (5) database/listTargetGroups.jsf, (6) sysconfig/listSystemInfo.jsf, (7) vascan/list.jsf, (8) network/router.jsf, (9) mapolicymgmt/editPolicyProfile.jsf, or (10) mapolicymgmt/maPolicyMasterList.jsf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-09T22:00:00.000Z
CVE-2012-6348 
Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file, or (2) overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-04T21:00:00.000Z
CVE-2012-6349 
Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T16:00:00.000Z
CVE-2012-6350 
Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-31T11:00:00.000Z
CVE-2012-6352 
The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon crash and disk consumption) via crafted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T20:00:00.000Z
CVE-2012-6354 
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-19T19:00:00.000Z
CVE-2012-6355 
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T11:00:00.000Z
CVE-2012-6356 
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T11:00:00.000Z
CVE-2012-6357 
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T11:00:00.000Z
CVE-2012-6359 
IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 do not check whether an OpenID attribute is signed in the (1) SREG (aka simple registration extension) and (2) AX (aka attribute exchange extension) cases, which allows man-in-the-middle attackers to spoof OpenID provider data by inserting unsigned attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-18T21:00:00.000Z
CVE-2012-6360 
Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-18T21:00:00.000Z
CVE-2012-6369 
Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-28T11:00:00.000Z
CVE-2012-6371 
The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading broadcast packets, a different vulnerability than CVE-2012-4366.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-31T20:00:00.000Z
CVE-2012-6392 
Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-17T15:00:00.000Z
CVE-2012-6395 
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service (device crash) via unknown vectors, aka Bug ID CSCuc65775.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-18T21:00:00.000Z
CVE-2012-6396 
Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-19T20:00:00.000Z
CVE-2012-6397 
Cross-site scripting (XSS) vulnerability in Cisco WebEx Social (formerly Cisco Quad) allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-17T15:00:00.000Z
CVE-2012-6399 
Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-27T14:00:00.000Z
CVE-2012-6422 
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-18T00:00:00.000Z
CVE-2012-6426 
LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-01T15:00:00.000Z
CVE-2012-6427 Carlo Gavazzi EOS Box SQL Injection
The Carlo Gavazzi 
EOS-Box

does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: Carlo Gavazzi Automation
product: EOS-Box
default_status: unaffected
Published: 2012-12-23T21:00:00.000Z
CVE-2012-6428 Carlo Gavazzi EOS Box Hard-Coded Credentials
The Carlo Gavazzi 
EOS-Box

stores hard-coded passwords in the PHP file of 
the device. By using the hard-coded passwords, attackers can log into 
the device with administrative privileges. This could allow the attacker
 to have unauthorized access.
Problem types: cwe_id: CWE-798
description: CWE-798
Affected products: vendor: Carlo Gavazzi Automation
product: EOS-Box
default_status: unaffected
Published: 2012-12-23T21:00:00.000Z
CVE-2012-6429 
Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T14:00:00.000Z
CVE-2012-6430 
Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php.  NOTE: this might be a duplicate of CVE-2008-4140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-24T14:00:00.000Z
CVE-2012-6431 
Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-27T11:00:00.000Z
CVE-2012-6432 
Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /_internal substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-27T11:00:00.000Z
CVE-2012-6433 
Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hijack the authentication of administrators for requests that conduct XSS attacks via the news_title parameter in a create action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-03T11:00:00.000Z
CVE-2012-6434 
Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) download_url, (2) download_url_extended, (3) download_author_email, (4) download_author_website, (5) download_image, (6) download_thumb, (7) download_visible, or (8) download_class parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-03T11:00:00.000Z