Global Search in Zoho ManageEngine OpManager prior to 12.3 123205 allows SQL Injection.
zohocorp manageengine opmanager