Here is a good read that I found on the internet about SQL Injections.

HP has a nice tool available to scan your sites for such vulnerabilities.

http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2008/06/23/finding-sql-injection-with-scrawlr.aspx