You can use Netsparker Community Edition (free) http://www.mavitunasecurity.com/communityedition/ http://www.mavitunasecurity.com/communityedition/. It will sca

You can use Netsparker Community Edition (free) http://www.mavitunasecurity.com/communityedition/ http://www.mavitunasecurity.com/communityedition/. It will scan your web application against SQL Injection and Cross-Site Scripting vulnerabilities.