VYPR
Unrated severityNVD Advisory· Published Dec 14, 2006· Updated Jun 16, 2026

CVE-2006-6516

CVE-2006-6516

Description

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) page parameter to (a) index.php3, or the (2) lib_path parameter to (b) authenticate.inc.php3 or (c) lib/exifer/exif.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Kdpics/Kdpics2 versions
    cpe:2.3:a:kdpics:kdpics:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:kdpics:kdpics:*:*:*:*:*:*:*:*range: <=1.16
    • (no CPE)range: <=1.16

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.