Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.
odallated shareet 1.0