A remote SQL injection vulnerability has been discovered in EyouCMS versions up to 1.7.9. The vulnerability exists in the GetSortData function within the application/common.php file, specifically through manipulation of the sort_asc argument. The attack can be initiated remotely and the exploit has been publicly disclosed. The project maintainers have been notified through an issue report but have not yet responded to address the security flaw.