well just search google for the exploit name hehe, one we used to play with all the time was CGI_Cart, till i wrote up an advisory and everyone and their mother used it and they patched, hehe..
The best way to go about finding whole in CGI programming is learn to program CGI scripts. Once you can understand all of the coding, you can look at the source yourself and find things wrong with it.