The PostNuke pnEncyclopedia module versions 0.2.0 and below suffer from a blind SQL injection vulnerability.