DORG Disc Organization System suffers from cross site scripting and remote SQL injection vulnerabilities.