Description DbNinja 3.2.7 allows session fixation via the data.php sessid parameter. References https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Broken_Authentication/readme.md