RSMonials
http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component XSS Exploit 190610 Believed to be 1.5.1 version
jsjobs
jsjobs SQL Injection Vulnerability
Custom PHP Pages
http://extensions.joomla.org/extensions/edition/custom-code-in-content/5057 LFI Vulnerability Developer declares not vulnerable 140510
Multiple Map
Multiple Map Local File Inclusion Vulnerability joomlacomponent.inetlanka.com
diary
http://dev.pucit.edu.pk/ 120410
SqlReport
Sqlreport has a sql/RFI exploit. awaiting confirmation on exact developer. Feb 20 Not Known
Team’s
Teams extension SQL Injection 120810
Minify4Joomla
http://waltercedric.com/ LFI and xss 090710 No longer available to download
gamesbox
SQL Injection Vulnerability http://www.jooforge.com/en/download/commercial/extensions/39-gamesbox 010710 upgrade to 1.0.10
Answers v2.3beta
Multiple Vulnerabilities http://extensions.joomla.org/extensions/communication/forum/12652 180610