The remote host is running SparkleBlog, a web blog manager written in PHP. The remote version of this software contains a flaw in the file 'journal.php' which may allow an attacker to insert arbitrary SQL statements in the remote database.

Upgrade to the newest version of this software or disable it.