rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-4230 
SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4231 
Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] parameter to search.php in a search_links_advanced action, and the (3) direction or (4) sort parameter to articles.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4232 
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4233 
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ad_number parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4234 
SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4235 
Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4236 
Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4237 
Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4238 
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4239 
Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4240 
SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4241 
Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4242 
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T19:00:00.000Z
CVE-2005-4243 
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) popupid parameter in popups.edit.php; (2) so, (3) sb, and (4) nr parameters in customer.tickets.view.php; (5) subrackingid parameter in subscribers.tracking.edit.php; (6) delete parameter in design.php; (7) trackingid parameter in tracking.details.php; and (8) customerid parameter in sales.view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4244 
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery_id parameter to view.php and (2) image_id parameter to image.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4245 
Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4246 
SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php and (2) page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4247 
Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4248 
Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via various fields, such as those in (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, and (3) mycompany/categories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4249 
ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4250 
Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4251 
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4252 
Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-14T11:00:00.000Z
CVE-2005-4253 
Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL.  NOTE: this might be resultant from CVE-2005-4160.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4254 
SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4255 
Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4256 
Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_title parameter.  NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.  In addition, its accuracy is in question because "forum_title" does not appear to be specified in the source code for XM Forum RC3.  It is possible, but not certain, that this is CVE-2004-2211.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4257 
Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4258 
Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4259 
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) TID parameter in topic.asp, (2) FORUM_ID parameter in forum.asp, and (3) PROFILE_ID parameter in profile.asp.  NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4260 
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers.  NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4261 
Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug in Perl." NOTE: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different vulnerability than CVE-2005-3962; however, there is insufficient information to be sure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4262 
Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) startrow and (2) catid parameter.  NOTE: this issue might be resultant from the SQL injection problem (CVE-2005-4263).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4263 
SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4264 
Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4266 
WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T11:00:00.000Z
CVE-2005-4267 
Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-21T11:00:00.000Z
CVE-2005-4268 
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T18:08:00.000Z
CVE-2005-4269 
mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form.  NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath.  If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T20:00:00.000Z
CVE-2005-4270 
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T20:00:00.000Z
CVE-2005-4271 
Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T22:00:00.000Z
CVE-2005-4272 
Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T22:00:00.000Z
CVE-2005-4273 
Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T22:00:00.000Z
CVE-2005-4274 
Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related to "authentication mechanisms" and "form input."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-15T23:00:00.000Z
CVE-2005-4275 
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD), as demonstrated using hping2.  NOTE: the provenance of this issue is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4276 
Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4277 
Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4278 
Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4279 
Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4280 
Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4281 
Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to zaygo.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4282 
Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML, possibly via the root parameter to zaygo.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4283 
Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4284 
Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter.  NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4285 
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the search module parameter or the (2) product and (3) cart_id parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4286 
Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4287 
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4288 
Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php.  NOTE: this might be resultant from CVE-2005-4287.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4289 
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via the user_action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4290 
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) kword, (2) max, (3) min, (4) comp, and (5) f parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4291 
Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) product, (2) category, and (3) uid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4292 
Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4293 
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the affl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4294 
Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4295 
Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4296 
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-4297 
Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T23:00:00.000Z