phpMyAdmin 2.11.1.2 is released

[Vin DSL]

I don't know how many of you are running your own installs of phpMyAdmin, but there has been a recent spattering of security problems.

Better get phpMyAdmin 2.11.1.2 ASAP!

http://www.phpmyadmin.net/home_page/index.php

BTW, these are XSS issues (the worst kind IMHO) and should NOT be ignored!!!

EXAMPLE - SOURCE

Type-1 attack

1. Alice often visits a particular website, which is hosted by Bob. Bob's website allows Alice to log in with a username/password pair and store sensitive information, such as billing information.
   
   
2. Mallory observes that Bob's website contains a reflected XSS vulnerability.
   
   
3. Mallory crafts a URL to exploit the vulnerability, and sends Alice an email, making it look as if it came from Bob (ie. the email is spoofed).
   
   
4. Alice visits the URL provided by Mallory while logged into Bob's website.
   
   
5. The malicious script embedded in the URL executes in Alice's browser, as if it came directly from Bob's server. The script steals sensitive information (authentication credentials, billing info, etc) and sends this to Mallory's web server without Alice's knowledge.