OrangeScrum Project Management Software version 1.6.1 suffers from a database disclosure vulnerability.