I will give you a description of vulnerability. You will extract vulnerable library functions. Write the output in following format:
FUNCS function1, function2, ...
If you found no functions, output "NONE". 
If the description is not about vulnerable library or module, output "NONE". 

Here is the description:
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.
 Provide your response in exactly 2 paragraphs (separated nearby paragraphs with 3 aterisk symbols ***).
user