A SQL injection vulnerability has been identified in SourceCodester Hospitals Patient Records Management System version 1.0. The vulnerability affects an unknown function in the file /classes/Users.php?f=save through manipulation of the ID argument. The vulnerability allows for remote exploitation and a public exploit is available, making it particularly dangerous. This affects healthcare record management systems which contain sensitive patient data.