CVE-2011-3728: Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file,...

Security readout for executives and security teams

CVE-2011-3728 is an information disclosure issue in Dolphin 7.0.4. A remote visitor could request certain PHP files directly and trigger an error that exposes the server installation path. This does not show direct system compromise, but it can help attackers map the environment. Exposure is most likely on internet-facing Dolphin 7.0.4 installations that display PHP or application errors to unauthenticated users. The affected metadata is incomplete, so asset owners should verify product and version locally. Low priority unless Dolphin 7.0.4 is internet-facing or part of a sensitive service. Address during routine hardening, because path disclosure can improve attacker reconnaissance but is not presented as direct code execution or data theft. Mitigation focus: Identify any live or archived Dolphin 7.0.4 deployments.; Check vendor or maintainer guidance for any fixed release or advisory.; Disable display of PHP/application errors in production responses..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.