SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.Referenceshttp://www.securityfocus.com/bid/8159http://marc.info/?l=bugtraq&m=105733277731084&w=2