Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.
protectedlinks expiring download links 1.0