CVE-2011-3704

CVE-2011-3704 describes an information disclosure vulnerability in appRain 0.1.0, where remote attackers can obtain sensitive installation path details. This is achieved by directly requesting specific .php files, such as cron.php, which then reveal the information within error messages. With a CVSS score of 5.0, this low-complexity vulnerability requires no authentication and primarily impacts confidentiality, with no known impact on integrity or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old vulnerability.