Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors.
http://www.vupen.com/english/advisories/2007/2719
http://www.securityfocus.com/archive/1/476017/100/0/threaded