ProductCart version 2.1 suffers from a database disclosure vulnerability.