A SQL injection vulnerability exists in Tipray Data Leakage Prevention System 1.0 in the doFilter function of findDeptPage.do. Manipulating the 'sort' argument can lead to remote exploitation. Public exploit code is available, and the vendor has not responded to disclosure requests. The vulnerability has a high severity CVSS score of 7.3.