'modus operandi' - Piwigo 2.9.2

As I 'promised': Vendor received the details but after all* - to this day - I have no idea what's goin on now... No response, no feedback, so "Vendor don't care" in my opinion. Full disclosure.
* details without the details:

TL;modus.py quick results:

1) sqli for authorized user #01

Below request (for the bug mentioned at the twitter):

Response should look like this:

2) sqli for authorized user #02

Request:

Response:

Soon I'll try to post some more details from modus.py :]

Cheers


...