Cookie poisoning is a technique known mainly for achieving impersonation and breach of privacy through manipulation of session cookies that maintain the identity of the client (or end user).

Once an attack is activated, everything from account hijacking, changing of user Settings, cookie theft and poisoning, or false advertising is possible.