This file is indexed.

/usr/share/zabbix/api_jsonrpc.php is in zabbix-frontend-php 1:1.8.11-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
<?php
/*
** ZABBIX
** Copyright (C) 2000-2009 SIA Zabbix
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
**/
?>
<?php
define('ZBX_RPC_REQUEST', 1);
require_once('include/config.inc.php');

$allowed_content = array(
	'application/json-rpc'		=> 'json-rpc',
	'application/json'			=> 'json-rpc',
	'application/jsonrequest'	=> 'json-rpc',
//	'application/xml-rpc'		=> 'xml-rpc',
//	'application/xml'			=> 'xml-rpc',
//	'application/xmlrequest'	=> 'xml-rpc'
				);
?>
<?php

$http_request = new CHTTP_request();
$content_type = $http_request->header('Content-Type');
$content_type = explode(';', $content_type);
$content_type = $content_type[0];


if(!isset($allowed_content[$content_type])){
	header('HTTP/1.0 412 Precondition Failed');
	exit();
}

$data = $http_request->body();

if($allowed_content[$content_type] == 'json-rpc'){
	header('Content-Type: application/json');

	$json_rpc = new CJSONrpc();

	$json_rpc->process($data);
	$data = $json_rpc->result();

	echo $data;
}
else if($allowed_content[$content_type] == 'xml-rpc'){

}
?>