If you can poison cache, you can probably use that a stepping stone to read session data from other sites.