It appears that the Journal module is plagued with exploits. I will not publish them but I recommend that you NOT use this module until it is either rewritten or patched.

See this post also.