You can store those values in the session using the same technique used to store everything else. Just look at the set session value server behaviors on the confirm page that sets everything else and set more session variables for anything that is not stored. Then you can refer to those session variables wherever you need to.
CC information is probably already stored in the session, I think a function is used to strip all but the last four digits, if you removed that function it would have the full card number or refer directly to the value in the session since that is what is passed to the vendor in an actual checkout scenario.
You can add cc info fields to your orders table in your database and inser the cc number and expiration data and cc value by updating the "Store cart Summary in Database" server behavior on the confirm page.
