eVuln ID: EV0109 - Null news 2005.07.27 suffers from SQL injection in lostpass.php sub.php and unsub.php