An arbitrary file upload vulnerability in Borg SPM 2007 allows unauthenticated attackers to achieve remote code execution through the deployment of web shells.

The application fails to properly validate the file types uploaded by users (CWE-434). This allows an unauthenticated remote attacker to upload malicious files, such as web shells, which can then be executed by the server to gain remote code execution (RCE).

Remote code execution allows an attacker to gain a persistent foothold on the server, potentially leading to full system compromise, lateral movement within the network, and complete data theft. This critical risk is reflected in the 9.8 CVSS score, indicating a high likelihood of catastrophic business impact.

Immediate Action: Upgrade to the latest version (SPM2025 SP1) immediately to remove the vulnerable file upload functionality.

Proactive Monitoring: Scan web directories for newly created files, specifically those with suspicious extensions or unexpected creation timestamps.

Compensating Controls: Configure the web server to disable script execution in upload directories and implement strict file type validation at the WAF level.

Public Exploit Available: unknown

This vulnerability represents the most dangerous class of web flaws. It is imperative that organizations discontinue the use of this legacy version and transition to the modern, security-audited SPM2025 SP1 release to ensure the server remains protected against RCE attacks.