Hax is a project mainly written in PHP, it's free.

A very easily hacked website written for a Web Security talk I gave to CS50