A SQL injection vulnerability exists in the findTenantPage function of the Tipray Data Leakage Prevention System 1.0. The vulnerability arises from improper handling of the 'sort' argument, allowing remote attackers to execute arbitrary SQL commands. The flaw has a CVSS 3.1 score of 7.3 (high severity). Public exploit code has been disclosed, but no vendor response or patch is currently available.