It's rather simple.. and it deals with vulns at the "server level" (no sqli, rfi, xss, etc..) anyway..
http://code.google.com/edu/content/submissions/web_security/listing.html
Lectures
Coding Projects
It has 2 slide shows and 1 problem set.
Thanks to crack_x for showing me the code.google.com/edu site.
Discuss here: http://sla.ckers.org/forum/read.php?13,14409