Fifthplay S.A.M.I suffers from cross site request forgery and persistent cross site scripting vulnerabilities.