Security Issue serouis trouble. Customer mad

[Tinuviel]

Help!

I got an angry E-mail from one of my customers.

He had got a receipt intended for another customer.

I checked it out and found out that this other new customers registration in some way had overwritten the old customer (the angry one) and he could view the old customers orders and both the new customers orders and the new customers orders has the old customers name and E-mail as the buyer. The shipping and billing adress is right though.

 

This has never happened before on my site and is a very serious security problem.

 

I need urgent help with this.

Is there anybody who knows wht happened and how do i fix it.

I'm very dependent of my customers.

 

I run oscommerce-2.2-ms2 on http://www.cigarrlagret.nu

 

Best regards.

 

Jakob bergström