A SQL injection vulnerability exists in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0, specifically in the findCategoryPage function of the findCategoryPage.do file. The vulnerability arises from improper handling of the tenantId argument, allowing remote attackers to execute SQL injection attacks. The exploit has been publicly disclosed, but the vendor has not responded or provided a fix.