Is there any personal privacy problem in session?

Here is a special satuation:

An user login my website, and looking for some goods.My website tracks and lists these goods which is visited by session id.If the user key in another url to redirect to another website and then leaves for a while(he forget to close browser)...

If someone else use this browse and do some operation like pressing the "goback button" or relinking the url from the history frame on the left side.Can he find the goods list of the older user? (because the url including session id and the website side server has not deleted the session.)If he can this is the private problem as same as cookie?

Have you some idea about resolving this problem Or it is a tough problem can not be resloved?

thank you all!

[760 byte] By [eingmarraa] at [2007-10-2 12:05:02]