Security vulnerability: phpMyAdmin Cross-Site Scripting Vulnerabilities

[iCARus]

Cedric Cochin has reported some vulnerabilities in phpMyAdmin, which
can be exploited by malicious people to conduct cross-site scripting
attacks.

Input passed to the "zero_rows" and "sql_query" parameters in
"read_dump.php" and the "PmaAbsoluteUri" parameter is not
sufficiently sanitised before being returned to users. This can be
exploited to execute arbitrary HTML or script code in a user's
browser session in context of a vulnerable site.

SOLUTION:
Update to version 2.6.0-pl3.
http://www.phpmyadmin.net/home_page/downloads.php

[chirpy]

You should really report security issues to cPanel either via bugzilla or to billing@cpanel.net