VP-ASP Shopping Cart version 5.x is remote susceptible to cross site scripting and SQL injection attacks.