CVE-2007-2492

CVE-2007-2492 describes an SQL injection in the v4bJournal module of PostNuke, specifically in index.php via the journal_comment action using the id parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. The available documents confirm the affected compo...