Which of the Following URLs Looks Like a SQL Injection

Multiple Choice

Which of the following URLs looks like a SQL injection attack?

A) http://www.example.dom/msadc/..%5c../..%5c../..%5c/..Á_../..Á_../..Á_../winnt/system32/cmd.exe
B)
Http://www.example.dom?search.pl?lname=doe%27%3bupdate%20usertable%20set%passwd%3d%27% P0wn3d--%00
C) http://www.example.dom?search.pl?lname=%3Cscript%3E%alert("P0wn3d") 3C%2Fscript%3E
D) http://www.example.dom/scripts/..%2f..%2f../winnt/system32/cmd.exe?c+dir