PhpMyAdmin & amp; #39; $ _ SESSION & amp; #39; Series unauthorized access vulnerabilities and fixes

Affected Versions:
PhpMyAdmin 3.4.0

Vulnerability description:
PhpMyAdmin is a PHP-based MySQL management program.
PhpMyAdmin has multiple security vulnerabilities:
1. Any variable in the super global $ _ SESSION sequence can be overwritten or created using any value.
2. An incorrect configuration in phpMyAdmin allows the content in the $ _ SESSION series to be written to. php-file. The combination 1 vulnerability may execute arbitrary code.
3, $ _ content in the SESSION sequence (post verification) is used for function input and executable PHP code.

<* Reference
Http://permalink.gmane.org/gmane.comp.security.oss.general/5348
*>

Vendor solutions
Follow official upgrade: http://www.phpmyadmin.net