Unrated severityNVD Advisory· Published Feb 21, 2007· Updated Apr 23, 2026

CVE-2007-1035

Description

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors.

Affected products

Drupal/Audio Module
cpe:2.3:a:drupal:audio_module:*:*:*:*:*:*:*:*
Drupal/Getid3
cpe:2.3:a:drupal:getid3:1.7.1:*:*:*:*:*:*:*
Drupal/Mediafield Module
cpe:2.3:a:drupal:mediafield_module:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

drupal.org/node/119385nvdPatchVendor Advisory
www.securityfocus.com/bid/22587nvdPatch
blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-modulenvd
osvdb.org/35161nvd
www.vupen.com/english/advisories/2007/0635nvd
exchange.xforce.ibmcloud.com/vulnerabilities/32542nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000