Version 3.4.9 of phpMyAdmin was published. It patches two security flaws. One of them was found in setup inferface, another affects export panels. Flaws can be exploited via cross-site scripting (XSS) attacks.
Vulnerabilities were found in all versions 3.x up to and including 3.4.8. Users can install patches or upgraded version 3.4.9.
source: Heise Online
23.12.2011