CVE-2025-11313 is a SQL injection vulnerability in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. The flaw exists in the findRolePage function of the findRolePage.do file, where manipulation of the 'sort' argument allows remote attackers to perform SQL injection. Exploit code has been published. The vendor was contacted but did not respond to the disclosure.