Question : datase record is updating with script tag <script src=<a rel="nofollow" href="http://s1.cawjb.com/s.js" target="_blank">http://s1.cawjb.com/s.<wbr />js</a>></scrip<wbr />t>

Hello everybody,
this is very serious issue.
Our website is running on Asp and MSSQL SERVER 2000.

somehow database records has been updating itself with following script tags. It might be virus or sql injection.