It is used to inject malicious code to a database server, through a query

None of the above

It is used to spoof or inject false headers in a HTTP request

It is used in Buffer Overflow attacks to overwrite memory