Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.