Nested Iframe Demo
This page demonstrates how vulnerabilities can be exploited through nested iframes.
The outer iframe embeds the XSS vulnerable page, which in turn embeds the SQLi vulnerable page.
Try entering: <img src="x" onerror="alert(document.domain)">