CVE-2007-1035: Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and A...

Security readout for executives and security teams

This is an old Drupal-related issue involving getID3 1.7.1 demonstration scripts used by Mediafield and Audio modules. If those scripts are exposed, a remote attacker could read or delete files, list directories, and write to limited file types. The public record does not name a CVSS score, patch, or confirmed exploitation. Exposure is most likely on legacy Drupal sites that deployed Mediafield or Audio modules with bundled getID3 1.7.1 demonstration scripts reachable from the web. Modern or fully maintained Drupal installations may not be affected, but the provided sources do not define a complete affected-version matrix. Treat internet-exposed legacy Drupal deployments as high priority because the reported impacts include file read and deletion. Prioritize discovery and removal of exposed demo scripts. Urgency is lower for systems without the affected modules or without public access to getID3 demonstration content. Mitigation focus: Identify Drupal sites using Mediafield or Audio modules with getID3 1.7.1.; Remove or disable publicly reachable getID3 demonstration scripts if not required.; Restrict web access to any retained demonstration or diagnostic scripts..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.