A SQL injection vulnerability exists in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0, specifically in the findRolePage function of the findSingConfigPage.do file. The vulnerability arises from improper handling of the 'sort' argument, allowing remote attackers to execute SQL injection attacks. Public exploit code is available. The vendor was contacted but did not respond, and no patch information is provided.