How to fix SQLinject me & XSS result but developers

Hi,

I was used (XSS-Me and SQL inject me firefox addon) that tool, its really great and Result (SQL injection and XSS) also very clear.

One more thing, I got the result but i want to know how to verify this result is correct one? Why i asked this questions is developers doesn?t accept the result for SQL injection and XSS.

I would like to know how to fix those issue by developers. Could you please give some Tips and Suggestion?

Thanks
Kumar