Session Fixation

“Session fixation attacks attempt to exploit the vulnerability of a system which allows one person to fixate (set) another person's session identifier.” - wikipedia

 

PDF: “Session Fixation Vulnerability in Web-based Applications”

AppSec Blog: Session Attacks and ASP.NET

MS KB: How and why session IDs are reused in ASP.NET

PHP-specific article: Session Fixation.