INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.