what are the best tools for CMS website scanning, i want to do complete scanning for Firewall, Sql Injection, Code Injections, monitoring my site all time, fixing bugs, etc.,
its for Joomla 1.5.
You'll have to be more specific on the Firewall part of your question.
SQL/Code injection testing can be done using Metasploit (http://metasploit.com/), since it's one of the most powerful/best supported penetration testing suites out there.
Site monitoring is something entirely different from penetration testing.
Bug fixes ... those can be done by updating the Joomla site code from the Joomla website.
Not sure what else to tell you.
Perhaps you'd like to check this software: OWASP http://es.wikipedia.org/wiki/Open_Web_Application_Security_Project