Session Fixation

Variants:
Direct Persistent 

Vector Operation Method:
Attackers can lure other users to access the application via pre-crafted links that set a pre-generated session identifier, eliminating the need to steal the session identifier of the user later, or referring the user to a resource in which the attacker already included malicious content.