CVE-2018-12631

HIGH

Redatam < 7 - Unauthenticated Path Traversal via LFN Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-12631. PoCs published by Berk Dusunur.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Redatam Web Server before version 7. By manipulating the LFN parameter, an attacker can leak directory structures and access arbitrary files on the server.

Description

Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/text?LFN=../ directory traversal.

Exploits (1)

exploitdb WORKING POC
by Berk Dusunur · textwebappswindows
https://www.exploit-db.com/exploits/44905

This exploit demonstrates a directory traversal vulnerability in Redatam Web Server before version 7. By manipulating the LFN parameter, an attacker can leak directory structures and access arbitrary files on the server.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Redatam Web Server < 7
No auth needed
Prerequisites: Access to the Redatam Web Server instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44905/

Scores

CVSS v3 7.5
EPSS 0.0327
EPSS Percentile 86.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
redatam/redatam < 7
Published Jun 21, 2018
Tracked Since Feb 18, 2026