A SQL injection vulnerability has been discovered in EyouCMS versions up to 1.7.9. The vulnerability affects the GetSortData function in the application/common.php file, where manipulation of the sort_asc argument leads to SQL injection. The attack can be initiated remotely and the exploit has been publicly disclosed. The project maintainers were notified early but have not yet responded to the issue report.