Session Puzzling

An attack that exploits session variable overloading, where the same session variable serves different purposes in different application contexts.