I will give you a description of vulnerability. You should extract vulnerable functions. Write the output in following format:
FUNCS function1, function2, ...
If you found no functions, output "NONE". 
If the description is not about vulnerable library or module, output "NONE". Print only functions mentioned in description.

Here is the description:
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save.
 Please reply with exactly 7 paragraphs and separate each paragraph with two new lines. The very 5th paragraph must start with the word "contact".
user