CVE-2018-12632

MEDIUM

Redatam < 7 - Information Disclosure via Invalid LFN Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-12632. PoCs published by Berk Dusunur.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Redatam Web Server before version 7. By manipulating the LFN parameter, an attacker can leak directory structures and access arbitrary files on the server.

Description

Redatam7 (formerly Redatam WebServer) allows remote attackers to discover the installation path via an invalid LFN parameter to the /redbin/rpwebutilities.exe/text URI.

Exploits (1)

exploitdb WORKING POC
by Berk Dusunur · textwebappswindows
https://www.exploit-db.com/exploits/44905

This exploit demonstrates a directory traversal vulnerability in Redatam Web Server before version 7. By manipulating the LFN parameter, an attacker can leak directory structures and access arbitrary files on the server.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Redatam Web Server < 7
No auth needed
Prerequisites: Access to the Redatam Web Server instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44905/

Scores

CVSS v3 5.3
EPSS 0.0145
EPSS Percentile 69.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
redatam/redatam < 7
Published Jun 21, 2018
Tracked Since Feb 18, 2026