QueryParam Scanner is a tool to help identify variables in your queries that are not within cfqueryparam tags. It is Free/Libre Software available under the terms of the GPL v3 license.
The project's web page is: https://www.sorcerersisle.com/software/qpscanner
The source code is available at: https://code.sorcerersisle.com/qpscanner
This is version #Application.Version# of QueryParam Scanner.