EIP-2026-111438

The document describes a SQL injection vulnerability in the PostNuke Modules Factory Subjects module, where user-supplied URI parameters are not properly sanitized. It provides example URLs demonstrating how an attacker could manipulate SQL queries to disclose sensitive information or corrupt data.