CVE-2024-51064 identifies a SQL Injection vulnerability in Phpgurukul Teachers Record Management System v2.1. The flaw exists in the handling of the tid parameter within the admin/queries.php script, allowing remote attackers to inject malicious SQL queries without authentication. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow attackers to execute arbitrary SQL commands on the backend database. This can lead to unauthorized data disclosure, data modification, or deletion, and potentially full system compromise depending on database privileges. The vulnerability affects confidentiality, integrity, and availability of the system.

No official patch or fix is currently available for this vulnerability. Users of Phpgurukul Teachers Record Management System v2.1 should apply compensating controls such as restricting access to the admin interface, employing web application firewalls to detect and block SQL injection attempts, and monitoring for suspicious activity. Check the vendor's advisory regularly for updates or official patches.