PaymentsPlus E-mail
Monday, 26 September 2011 09:52
http://paymentsplus.com.au/ 2.1.5 Blind SQL Injection Vulnerability 090710 current version 2.20, 2.1.5 not listed on dev site

Read more: Joomla! Documentation - Vulnerable Extensions List