Name: PK
Item: WebCookies.org
Rating: 5
Author: PK

Ruby on Rails 3 is using a CookieStore feature for session management which can result in various vulnerabilities, as described here and here. While it's not guaranteed that these websites are vulnerable or even use Ruby, the cookie name pattern matches the pattern used by CookieStore.

Website	Cookie name
www.stltoday.com	`_editorials_session`
www.theprovince.com	`_editorials_session`
mitchellrepublic.com	`_editorials_session`
www.miamiherald.com	`_editorials_session`
trib.com	`_editorials_session`
globalnews.ca	`_editorials_session`
lakewyliepilot.com	`_editorials_session`
post-gazette.com	`_editorials_session`
www.macon.com	`_editorials_session`
herald-review.com	`_editorials_session`
globalnews.ca	`_editorials_session`
www.elnuevoherald.com	`_editorials_session`
www.calgaryherald.com	`_editorials_session`
charlotte.com	`_editorials_session`
globalnews.ca	`_editorials_session`
london.ctvnews.ca	`_editorials_session`
www.pressrepublican.com	`_editorials_session`
www.redding.com	`_editorials_session`
www.theindychannel.com	`_editorials_session`
www.sacbee.com	`_editorials_session`
miami.cbslocal.com	`_editorials_session`
miami.cbslocal.com	`_editorials_session`
www.edmontonjournal.com	`_editorials_session`
timeswv.com	`_editorials_session`
api.flyertown.ca	`_editorials_session`

Web Cookies Scanner

Websites using Ruby CookieStore