in reply to Evaluating web cgi scripts

Well I don't know about a tool for scanning source code against. But if you want to have a comprehendable list of common problems and solutions I would start with something like the 'Perl Cookbook' From O'Reilly
--
Cheers,
Rob