A Tester Who Is Performing a Penetration Test on a Website

A tester who is performing a penetration test on a website receives the following output: Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?

A) <script>var adr= '../evil.php?test=' + escape(document.cookie) ;</script>
B) ../../../../../../../../../../etc/passwd
C) /var/www/html/index.php;whoami
D) 1 UNION SELECT 1, DATABASE() ,3--