ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')