From our normal approach , by adding single quotes i received 500 internal server error. By adding comments it gave me another response. So in doubt shooted the ghauri tool and it was vulnerable.