One of the vulnerabilities in your code but most of you,at least me, are not aware of.
You have to read this, u will enjoy it .

http://tabor-knowledge.blogspot.com/2014/08/http-parameter-pollution-with-cookies.html