CNNVD-202510-717 Information

CNNVD ID

CNNVD-202510-717

Related CVE

CVE-2025-11309

• CNNVD Published: 2025-10-05

Description (Chinese)

Tipray Data Leakage Prevention System是中国天锐（Tipray）公司的一款数据防泄密系统。 Tipray Data Leakage Prevention System 1.0版本存在安全漏洞，该漏洞源于对文件findDeptPage.do中参数sort的错误操作，可能导致SQL注入攻击。

Description (English)

Tipray Data Leakage Protection System is a data-discretion protection system of the Chinese company Tipray. There is a security loophole in version 1.0 of Tipray Data Leakage Protection System, which results from an error in the sort of the parameter in the FindDeptPage.do file, which could lead to an SQL injection attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

天锐

Published

2025-10-05

Last Modified

2026-02-24

References

https://github.com/FightingLzn9/vul/blob/main/%E5%A4%A9%E9%94%90%E6%95%B0%E6%8D%AE%E6%B3%84%E9%9C%B2%E9%98%B2%E6%8A%A4%E7%B3%BB%E7%BB%9F-1.md https://github.com/FightingLzn9/vul/blob/main/%E5%A4%A9%E9%94%90%E6%95%B0%E6%8D%AE%E6%B3%84%E9%9C%B2%E9%98%B2%E6%8A%A4%E7%B3%BB%E7%BB%9F-1.md#sql-injection-vulnerability https://vuldb.com/?ctiid.327190 https://vuldb.com/?id.327190 https://vuldb.com/?submit.663382