This file is indexed.

/usr/share/xcache/htdocs/cacher/mkpassword.php is in php5-xcache 3.2.0-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
<?php
header("Cache-Control: no-cache, must-revalidate");
header("Expires: Sat, 26 Jul 1997 05:00:00 GMT");
?>
<html>
	<head>
		<title>Simple MD5 password generator</title>
		<style stype="text/css">
			code pre { display: block; border: 1px dashed black; padding: 10px; }
		</style>
	</head>
	<body>
		<h1>Simple MD5 password generator</h1>
		<form method="post">
			<fieldset>
				Name:<br />
				<input type="text" name="username"><br />
				Password:<br />
				<input type="password" name="password"><br />
				<input type="submit"><br />
				The INI settings you need is:
				<code>
				<pre><?php
				if ($_SERVER['REQUEST_METHOD'] == 'POST') {
					$md5 = md5(@ $_POST['password']);
					$offs = mt_rand(0 + 1, 31 - 1);
					$md5_1 = substr($md5, 0, $offs);
					$md5_2 = substr($md5, $offs);
					$username = htmlspecialchars($_POST['username']);
					echo "xcache.admin.user=\"$username\"\n";
					echo "xcache.admin.pass=\"<span>$md5_1</span><span>$md5_2</span>\"\n";
				}
				?></pre>
				</code>
			</fieldset>
		</form>
	</body>
</html>