Test ID:	1.3.6.1.4.1.25623.1.0.801936
Category:	Web application abuses
Title:	MyChat Plus Multiple Vulnerabilities
Summary:	MyChat Plus is prone to multiple vulnerabilities.
Description:	Summary: MyChat Plus is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - Improper sanitization of user supplied input through the 'CookieUsername' and 'CookieStatus' parameter in Cookie. - Improper sanitization of user supplied input through the 'pmc_password' parameter in a printable action to avatar.php. Vulnerability Impact: Successful exploitation will allow attacker to cause SQL Injection attack, gain sensitive information about the database used by the web application or can cause arbitrary code execution inside the context of the web application. Affected Software/OS: phpMyChat Plus version 1.93. Solution: Upgrade to version 1.94 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.