CVE-2024-9091 is a critical SQL Injection vulnerability found in code-projects Student Record System 1.0, posing a significant threat to data security. This vulnerability allows remote attackers to inject malicious SQL code via the regno parameter in the /index.php file. With an SVRS of 84, this vulnerability is considered critical and requires immediate attention to prevent exploitation. Publicly disclosed exploits are available, increasing the urgency to patch this flaw. Successful exploitation could lead to unauthorized access to the student record database, data breaches, and potential system compromise. The high SVRS indicates active interest from threat actors, making it imperative to implement mitigations swiftly to protect sensitive student information and maintain system integrity.