PhpMyAdmin 3.x setup script remote cross-site scripting vulnerability and repair

Affected Versions:
PhpMyAdmin 3.x vulnerability description:
Cve id: CVE-2010-3263

PhpMyAdmin is a PHP tool used to manage MySQL through the WEB.

The setup script of phpMyAdmin does not properly filter parameters submitted to the setup/frames/index. inc. php page. Remote attackers can inject and execute arbitrary Web scripts or HTML by using malicious server names. <* Reference
Tenable Network Security (http://www.tenablesecurity.com /)

Http://secunia.com/advisories/41210
Http://www.phpmyadmin.net/home_page/security/PMASA-2010-7.php
*>

Vendor patch:

PhpMyAdmin
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi? P = phpmyadmin/phpmyadmin; a = commitdiff; h = 73ce5705bd1e0b62060f75702d62f88247ce09dd