DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.Referenceshttps://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Broken_Authentication/readme.md
