phpMyAdmin Preg_Replace Exploits CVE-2013-3238

See: http://www.waraxe.us/advisory-103.html

Tested on nix/apache/php v5.4.6 with most vulnerable versions.

Aside: 
I have also added a method to http/response.rb to help parse out Cookies from Set-Cookie. 

Some modules appear to cookie = response['Set-Cookie'] which works if you only receive 1 cookie as it is delimited correctly by ;. If The cookie is set with HttpOnly or Expires etc these get pushed into the Cookie: field also.