Application security audit of a real estate portal