Here is a tool to help detect sql injections.  You have to sign-up for the free tool, but it’s worth it.

http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2008/06/23/finding-sql-injection-with-scrawlr.aspx

Hope this helps