source: https://www.securityfocus.com/bid/38603/info KDPics is prone to a vulnerability that lets an attacker add an administrative user because it fails to adequately secure access to administrative functionality. This may allow the attacker to compromise the application and the computer; other attacks are also possible. KDPics 1.18 is vulnerable; other versions may also be affected.