A SQL injection vulnerability has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. The flaw affects the /classes/Users.php?f=delete file where manipulation of the ID argument leads to SQL injection. The vulnerability can be exploited remotely and a public exploit has been released, making it available for potential attacks. This represents a significant security risk for healthcare systems using this patient records management software.