Vulnerability in Netobjects Fusion

CVE-2005-3923

NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and modify the associated ZIP file to edit and republish the site.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Netobjects Netobjects_fusion — versions 9
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)