Some security issues have been reported in phpMyAdmin, which can be exploited by malicious users to manipulate certain data and potentially perform certain actions with escalated privileges, and by malicious people to bypass certain security restrictions.

1) The application creates the temporary directory with world-writable permissions, which can be exploited to modify files.

2) The application creates temporary files with a predictable file name, which potentially can be exploited to perform certain actions with escalated privileges via symlink attacks.

3) Certain input passed to the scripts/setup.php script is used in a call to the "unserialize()" function.

The security issues are reported in versions prior to 2.11.10.

Solution
Update to version 2.11.10. Also fixed in version 3.0.0 or later.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits:
1) Thomas Biege and Sebastian Krahmer
2, 3) Thijs Kinkhorst

Original Advisory
http://www.phpmyadmin.net/home_page/security/PMASA-2010-1.php
http://www.phpmyadmin.net/home_page/security/PMASA-2010-2.php
http://www.phpmyadmin.net/home_page/security/PMASA-2010-3.php

Deep Links
Links available in Customer Area