Accellion Kiteworks prior to 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.
accellion kiteworks