I would think so, the DB name and password is all over config files - unencrypted. I used to be able to run a perl script in my directory executing system commands which gave me access to all other accounts on the same server. I was able to read any file anywhere is I wanted to. Now it is all tight though.