You can use Netsparker Community Edition (free) http://www.mavitunasecurity.com/communityedition/. It will scan your web application against SQL Injection and Cross-Site Scripting vulnerabilities.