CVE-2018-18949: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...