File upload vulnerability in qtcms

qtcms is a CMS builder based on Thinkphp framework. A file upload vulnerability exists in qtcms, which can be exploited by attackers to upload a webshell and gain server privileges...