I don’t have to subscribe to bugtraq to know when phpMyAdmin has a security issue. I just watch my logs:
/MYADMIN/main.php: 1 Time(s) /MyAdmin/main.php: 1 Time(s) /PHPMYADMIN/main.php: 1 Time(s) /PHPmyadmin/main.php: 1 Time(s) /PMA/main.php: 1 Time(s) /admin/db/main.php: 1 Time(s) /admin/main.php: 1 Time(s) /admin/myadmin/main.php: 1 Time(s) /admin/mysql/main.php: 1 Time(s) /admin/mysqladmin/main.php: 1 Time(s) /admin/mysqlmanager/main.php: 1 Time(s) /admin/phpMyAdmin/main.php: 1 Time(s) ...
No doubt it’s a handy tool, but do yourself a favor and slap an htaccess file on that sucker if you use it.
