vShare Youtube Clone version 2.6 suffers from a remote SQL injection vulnerability in group_posts.php.