CVE:CVE-2006-6516
CNNVD:CNNVD-200612-276
KDPics 1.16及更早版本存在多个PHP远程文件包含漏洞，远程攻击者可以通过传给(a)index.php3的(1)page参数，或者传给(b)authenticate.inc.php3或(c)lib/exifer/exif.php的(2)lib_path参数来执行任意PHP代码。
solution:Upgrade kdpics kdpics to a higher version than 1.16,and avoid the version (,1.16]