SQL Injection

liblog4cxx.so is vulnerable to SQL Injection. The vulnerability exists when using the ODBC appender to send log messages to a database because the fields are not properly escaped which allows an attacker to inject and execute arbitrary SQL queries...