Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter.
- http://securityreason.com/securityalert/2866
No PoCs found on GitHub currently.