CVE-2017-15977

Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.