Session fixation

openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21...