Pixy is an open source vulnerability scanner that audits PHP applications for SQL injection and cross site scripting vulnerabilities. It is written in Java and also performs automatic resolution of file inclusions.
1efbf5349ce56b1930fd159abf9a3d580eadd4627972551442bb1397a4c8ef46