Google Code Search for Security Vulnerabilities
Here’s my attempt—hunting for $_GET / $_POST / $_COOKIE placed at the start of on and include / require / include_once / require_once—potentially a path to include remote files. (Un)?fortunately seems to break the search interface right now—although more results are reported, you can’t seem to get beyond page 2 [...]