Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')