Xoops version 1.0.2 with PD-Links module version 1.0 suffers from a database disclosure vulnerability.