$ 0 0 F3Site 2011 Alfa 1 suffers from cross site request forgery and cross site scripting vulnerabilities.