A SQL injection vulnerability exists in Tipray Data Leakage Prevention System 1.0 in the findRolePage function of the findSingConfigPage.do file. The vulnerability arises from improper handling of the 'sort' argument, allowing remote attackers to manipulate SQL queries. Public exploit code has been disclosed, and the vendor has not responded to the disclosure. The vulnerability has a high severity rating with a CVSS score of 7.3.