Engel & Völkers Technology GmbH: Information Exposure at https://printshop.engelvoelkers.com/

Summary: There is an information exposure through some tmp, txt files that can allow an attacker to download some files from the application. Steps To Reproduce: + There are some files that exposed internal links from the application, inside of these files you can view some .xls that you can...

Engel & Völkers Technology GmbH: [www.go3.engelvoelkers.com] - Reflected XSS in /dGPS3/default.jsp

Summary: The application fails to sanitize user input in https://www.go3.engelvoelkers.com/dGPS3/default.jsp and reflect the input directly in the HTTP response, allowing the hacker to exploit the vulnerable parameter and have malicious content executed in the victim's browser. Description: A...

Engel & Völkers Technology GmbH BBP: Source Code Disclosure at http://service.engelvoelkers.com/alert/_backups/app

Summary: I found the source code of http://service.engelvoelkers.com/, compressed in the file app.gz, which can be downloaded at http://service.engelvoelkers.com/alert/backups/app. It contains the source code, some source code back ups and other sensitive information such as production server mys...

Engel & Völkers Technology GmbH BBP: Stored XSS in Watch Lists

Summary: Hi team, I added a house to my Watch List by clicking "Star" button in a property. And I saw this request. █████ Firstly, I changed value of the title parameter to alertdocument.cookie and I sent this request. But the name of property was same in my Watch list. So I tried to change IDs i...

Engel Voelkers Cross Site Scripting

Exploit Title: Reflected XSS at Engel Voelkers Date: 27.05.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.engelvoelkers.com/ Software Link: Engel Voelkers Website Version: 1.0 Tested on: Kali Linux Reflected XSS Payload : residential'-confirm/Ismail Tasdelen/-' HTTP REQUEST...

engel-webkatalog.de XSS vulnerability

Open Bug Bounty ID: OBB-614509 Description| Value ---|--- Affected Website:| engel-webkatalog.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hotel-engel-ulm.de XSS vulnerability

Vulnerable URL: http://www.hotel-engel-ulm.de/kontakt/formularfehler.php?thisform==%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

Joomla Front End User Access Local File Inclusion

================================================================================================ Title : Joomla Component Front End User Access LFI Vulnerability Developer: Carsten Engel Download : http://www.pages-and-items.com/downloads/comfrontend-user-accessv3.4.0j1.5free.zip Version : Date :...