How can he do that?

Hi all, i have setup cs cart and i found a strangle in my admin cpanel.

Here in my log



He create a count and update becom admin and he can, delete, can change status order.

My God

Any one tell me what i should do now?

Here is log in my server

123.19.189.115 - - [02/Apr/2010:10:55:06 +0700] “POST /index.php HTTP/1.1” 302 - “Công ty TNHH TM Thế Giới Trực Tuyến” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2”



123.19.189.115 - - [02/Apr/2010:11:01:25 +0700] “GET /admin***.php?dispatch=orders.details&order_id=15 HTTP/1.1” 200 32920 “http://thegioitructuyen.vn/admin****.php?dispatch=orders.manage” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2”

When a user places an order the status changes on it’s own like you are showing in your screen shot. There is nothing out of the ordinary from your screen shot.