H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.
h3c h3cloud os