Security Sefrengo CMS 1.6.0 SQL Injection January 6, 2015 007admin Leave a comment Sefrengo CMS version 1.6.0 suffers from a remote SQL injection in the administrative backend.