CVE-2025-11312 is a high-severity SQL injection vulnerability in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. The flaw exists in the findModulePage function of the findModulePage.do file and is exploitable remotely via manipulation of the 'sort' argument. Public exploit code is available, and the vendor has not responded to disclosure attempts.