CVE-2026-25405 Contributor SQL Injection in eRoom <= 1.7.1 versions

Description

Contributor SQL Injection in eRoom <= 1.7.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
eRoom 1.7	earliest → 1.7.1	No fix stated

Other CVEs of eRoom

The 6 CVEs of eRoom →

CVE-2026-114175 Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly… 5.4 Medium CVE-2026-114176 Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly… 4.3 Medium CVE-2026-62038 Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions 7.3 High CVE-2026-25427 Subscriber Broken Access Control in eRoom <= 1.7.1 versions 5.4 Medium