Assuming the excel file is in a location that's always known you can use the Excel Data Source to get to the information. Take a look at:
http://msdn.microsoft.com/en-us/library/ms141683.aspx
It does support SQL like syntax but it will be much easier if the worksheet has two rows - a column header and a data row. You pull the named parameters out of the data row.
Also, my recollection is that you do need to have Microsoft Office installed on the machine executing the SSIS job so keep that in mind as you deploy.
Once you have the values from the Excel Data Source, store them in variables where you can pass them as value parameters to your SQL query. See:
how to store sql query result in a variable and messegeBox