Orkut fails to expire or disable the session associated with the ‘orkut_state’ cookie when the user logs out or fails to authenticate himself during a session.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57305/orkut-mgmt.txt
Source: https://packetstormsecurity.com/files/57305/orkut-mgmt.txt.html