Skip to main content

SP Property CVE-2026-78084

| EUVDEUVD-2026-75392 MEDIUM
Improper Access Control (CWE-284)
2026-09-10 security@joomla.org GHSA-v5wx-6h49-5rhp
Authentication Bypass CSRF Joomla
6.9
CVSS 4.0 · Vendor: joomla
Share

Severity by source

Vendor (joomla) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.9 CRITICAL

Unauthenticated network access with no complexity; unrestricted file upload enables web shell deployment affecting the broader server (S:C), yielding high integrity and partial confidentiality/availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

Primary rating from Vendor (joomla).

CVSS VectorVendor: joomla

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Metadata Corrected
Sep 10, 2026 - 10:40 vuln.today
tag: Joomla added
Analysis Generated
Sep 10, 2026 - 10:31 vuln.today

DescriptionCVE.org

Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked authorization checks and CSRF token validation.. Users could invoke file removal actions with arbitrary path strings or upload unverified file types.

AnalysisAI

SP Property, a Joomla real estate listing extension by joomshaper.com, exposes gallery image management controller tasks without authorization checks or CSRF token validation in versions prior to 4.1.4. Unauthenticated remote attackers can invoke file deletion against arbitrary path strings and upload files of any type to the server. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No authentication is required - the gallery management controller tasks accept requests from unauthenticated network users due to the total absence of authorization checks, confirmed by the PR:N CVSS 4.0 metric. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.9 with VI:L/VA:L impact metrics substantially understates the realistic risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upgrade SP Property to version 4.1.4 or later, which introduces proper authorization checks and CSRF token validation on the gallery management controller tasks. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Joomla

View all
CVE-2016-10033 CRITICAL POC
9.8 Dec 30

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
CVE-2017-8917 CRITICAL POC
9.8 May 17

SQL injection vulnerability in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable,

CVE-2016-10045 CRITICAL POC
9.8 Dec 30

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
CVE-2015-8562 HIGH POC
7.5 Dec 16

Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public explo
CVE-2015-7297 HIGH POC
7.5 Oct 29

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2016-8869 CRITICAL POC
9.8 Nov 04

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated
CVE-2016-8870 HIGH POC
8.1 Nov 04

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated
CVE-2015-7857 HIGH POC
7.5 Oct 29

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.p
CVE-2015-7858 HIGH POC
7.5 Oct 29

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2013-5576 MEDIUM POC
6.8 Oct 09

administrator/components/com_media/helpers/media.php in the media manager in Joomla!. Rated medium severity (CVSS 6.8),

CVE-2014-7228 HIGH POC
7.5 Nov 03

Akeeba Restore (restore.php), as used in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploit
CVE-2014-7981 HIGH POC
7.5 Oct 08

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-78084 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy