CVE-2005-3923
NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.
Published:Nov 30, 2005
Last Modified:Apr 16, 2026
EPS:Nov 30, 2005
EPSS Score:0.00391
CVSS Score:5
Affected Products
Vendor
Product
Action
Vendor
Netobjects
Product
Netobjects Fusion
Netobjects
Netobjects Fusion
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
