Security Alfine CMS 2.6 SQL Injection June 28, 2016 007admin Leave a comment Alfine CMS version 2.6 suffers from a remote SQL injection vulnerability that allows for authentication bypass.