CI Cars

Vehicle sales and finance company with insecure loan application and login pages

http://www.cicars.com/my-account/

http://www.cicars.com/finance

http://www.cicars.com/login-register.asp

What is the problem?

This site collects passwords, personal info, residential and employment history, and even bank account details via an insecure, unencrypted page. This is extremely risky and you should not submit any data on this site until this is corrected.

Disclosure Policy

Prior to public disclosure, notification about any privacy or security issues discovered were sent by email to the operator of this website on 2nd September 2018, using either an email address publicly discoverable on the site, or the RFC 2142 standards compliant address "webmaster@..." if no public email address was provided.

At time of posting the issue had not yet been resolved.