VULNERABILITY INTELLIGENCE
CVE-2018-25294
CVSS score8.7 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-04-26
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')