Having session_id, can I bypass login form on remote server?

Question

Third party zend encrypted system has Web API, that let's you login through it and acquire session_id (for later calls?). Then there's a task, how to bypass login form having that session_id.

Is something like this possible at all?

Answer 1

Yes , it is called session hijacking.

Answer 2

Here is what we did in the end (look for an accepted answer):

http://stackoverflow.com/questions/2616425/ie-wont-start-session-from-an-iframe