Given the following: 

Which of the following vulnerabilities is present in the above code snippet? 

Answer options:

A. Disclosure of database credential
B. SQL-based string concatenation
C. DOM-based injection
D. Information disclosure in comments

C