You could also "cat /usr/local/wordpress/wp-config.php" and see the plaintext my...

d2 on Aug 2, 2011 | parent | context | favorite | on: Zero Day Vulnerability in many Wordpress Themes

You could also "cat /usr/local/wordpress/wp-config.php" and see the plaintext mysql username/password and inject malicious data into the DB, create/drop tables or databases depending on access level.