Actually i the database is connected to the MySQL server would you like to view it minus the password?
Doesn't matter, I've already fulfilled the conditions of your post - "do some damage" (by shaking the little confidence that existed in your bank) via accessing the (ironically error emitting) admin panel with a simple cookie change.
not a cookie change, anyone with an account can simply access the useless admin panel by adding "/admin" to the end of the url...