High severity7.5NVD Advisory· Published Mar 21, 2026· Updated Apr 10, 2026
CVE-2019-25552
CVE-2019-25552
Description
CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.
Affected products
1- cpe:2.3:a:cewe:photo_show:6.4.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/46861nvdExploitVDB Entry
- www.vulncheck.com/advisories/cewe-photo-show-denial-of-service-via-password-fieldnvdThird Party Advisory
- cewe-photoworld.comnvdProduct
News mentions
0No linked articles in our index yet.