CVE-2011-3708

CVE-2011-3708 describes an information disclosure vulnerability in Automne CMS version 4.0.2, where remote attackers can obtain sensitive installation path details. This is achieved by directly requesting specific .php files, such as admin/page-redirect-info.php, which then reveal the path in an error message. With a CVSS score of 5.0, this low-complexity attack requires no authentication and primarily impacts confidentiality (C:P), posing a moderate risk. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.