Description Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection. References https://github.com/Piwigo/Piwigo/commit/2ce1e5952238eba0fe5c5d6537ebdc76cb970b52 https://github.com/Piwigo/Piwigo/issues/1410