PEGames suffers from cross site scripting, local file inclusion, and remote file inclusion vulnerabilities.