groups

/groups/config.php
100:
$type = $_POST['type'];

/groups/config.php
139:
WHERE d.type = 'groups_$type' AND d.id_sim = '$object_uid' LIMIT 1"));

SQL Injection!
/groups/videos.php
246:
file: 'http://<?= $_SERVER['SERVER_NAME']?>/groups/video/<?= $video['hash']?>.<?= $video['ras']?>',

XSS!
/groups/videos.php
248:
screen: 'http://<?= $_SERVER['SERVER_NAME']?>/groups/video/480/<?= $video['hash']?>.jpg',

XSS!