Scrawlr – check *your* website for SQL injections
This is a nice tool by Hewlett-Packard you could use on .your. website to see if it’s vulnerable to SQL injection. It does not check forms so be aware – only URL input is checked.
You can find more in-depth information on the HP Security Labs site.