"I'm not sure, what the guys did during the audit of phpMyAdmin, but it took me 3 minutes to find a persistent XSS in the latest version."

https://twitter.com/totally_unknown/status/74275332346864026...