SQL injection possible

hi, some code presented in the project is vulnerable to **SQL injection**. I am mentioning the vulnerable snippet below.
_https://github.com/fuge/cms/blame/91f76341163b20d0db90406396ac86129b5d55d4/src/foo/cms/Install.java#L61:L73_