CVE-2025-11311

Tipray Data Leakage Prevention System 1.0 is affected. The vulnerability lies in the findTenantPage.do file, specifically the findTenantPage function, where manipulation of the sort argument enables SQL injection. Attacks can be initiated remotely, and public exploitation has been disclosed. The ...

Tipray Data Leakage Prevention System SQL注入漏洞

Tipray Data Leakage Prevention System is a data leakage prevention system of China Tipray Company. Tipray Data Leakage Prevention System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the incorrect operation of the parameter sort in the file findTenantPage.do, which m...