for each sql-injection vulnerability, there is an underlying set of constraints describing the kind of queries that the attacker/pen-tester is allowed to do.
This set of examples leverages XSS attacks by exploiting a SQL-injection vulnerability.