FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
freelancer clone project freelancer clone 1.0