For the following questions, select all answers which apply (may contain multiple choices)

(a) 9oogle is a search engine that claims to better than Google. Whenever a user searches for something, a line of text appears that says "You searched for: followed by the user's query unescaped. Which of the following is this vulnerable to?

A. Command Injection

B. Buffer Overflow

C. Format String

D. CSRF

E. XSS

F. SQL Injection

G. Clickjacking

H. None of the Above