CVE-2024-51063 identifies a critical SQL Injection vulnerability in Phpgurukul Teachers Record Management System v2.1. The vulnerability exists in the add-teacher.php endpoint, where the mobile number or email input parameters are not properly sanitized, enabling remote attackers to inject malicious SQL queries. The CVSS 3.1 base score of 9.1 reflects the vulnerability's network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity. There is no vendor advisory or patch available to address this issue as of the published date.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized disclosure of sensitive data and modification of database contents, severely compromising the confidentiality and integrity of the system. Availability impact is not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to implement input validation and parameterized queries on the affected parameters (mobile number and email) to mitigate SQL injection risks. Monitor for vendor updates regarding patches or official mitigations.