template fixes (#7523)

http/exposed-panels/odoo-database-manager.yaml

@@ -3,7 +3,7 @@ id: odoo-database-manager
 info:
   name: Odoo - Database Manager Discovery
   author: __Fazal,R3dg33k
-  severity: critical
+  severity: low
   description: Odoo database manager was discovered.
   metadata:
     max-request: 1
@@ -27,5 +27,3 @@ http:
       - type: status
         status:
           - 200
-
-# Enhanced by mp on 2022/07/15

http/misconfiguration/odoo-unprotected-database.yaml

@@ -0,0 +1,30 @@
+id: odoo-unprotected-database
+
+info:
+  name: Odoo - Unprotected Database
+  author: pdteam
+  severity: critical
+  description: |
+    The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized access.
+  remediation: |
+    Implement and enforce proper authentication and access control measures to protect the Odoo database manager.
+  metadata:
+    max-request: 1
+    verified: true
+    shodan-query: title:"Odoo"
+  tags: odoo,database,unauth
+
+http:
+  - method: GET
+    path:
+      - '{{BaseURL}}/web/database/manager'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Warning, your Odoo database manager is not protected."
+
+      - type: status
+        status:
+          - 200