Cewe-Photoworld CEWE PHOTO SHOW vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Cewe-Photoworld CEWE PHOTO SHOW: 2 record(s), with affected versions and fixes.
CVE-2018-25294
High · 7.5
CWE-120 Apr 26, 2026
CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service
CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.
CVE-2019-25552
High · 7.5
CWE-836 Mar 21, 2026
CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field
CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.