Given the following:

TODo - should this be odbe or jdbe?

var odbcString = getParameterByName ("querystring ", "dbConnector");

doc-innerHTML = "DB connector: " + odbestring + "";

document.body.appendchild (doc);

Which of the following vulnerabilities is present in the above code snippet?

1. Disclosure of database credential
2. SQL-based string concatenation
3. DOM-based injection
4. Information disclosure in comments