Credit Card Disclosure
Summary#
Invicti identified a possible credit card number disclosure.
Impact#
It is not mandatory for a merchant to require the security code for making a transaction, hence the card is still prone to fraud even if only its number is known to phishers.
Remediation#
We strongly advise you not to expose credit card numbers on your website.
Classifications#