Unscored severity · published Feb 21, 2007
CVE-2007-1035
Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Audio Module · Drupal
All versions, or not specified · source: NVD
GE
Getid3 · Drupal
1.7.1 · source: NVD
MM
Mediafield Module · Drupal
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1035
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1035
blamcast.net
http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module
Patch
http://drupal.org/node/119385
osvdb.org
http://osvdb.org/35161
Patch
http://www.securityfocus.com/bid/22587
www.vupen.com
http://www.vupen.com/english/advisories/2007/0635
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32542