Zoho ManageEngine ADAudit Plus prior to 5.0.0 build 5100 allows blind SQL Injection.
zohocorp manageengine adaudit plus