Cold BBS suffers from a remote database disclosure vulnerability.