phpMyAdmin version 220.127.116.11 was released to fix this, along with a
which contains a mitigating factor:
"We could only trigger it when using Internet Explorer with the 'send
URLs as UTF8' setting disabled. The default value of this setting being
'enabled' reduces the impact of this problem."
For distros who prefer a small patch:
Marc Delisle, for the team