Sql injection

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...