From c16b8d8902b16253f05be39623b5d0011d4d40d9 Mon Sep 17 00:00:00 2001
From: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Date: Wed, 9 Aug 2023 03:05:32 +0530
Subject: [PATCH] move directory and minor fix

---
 http/vulnerabilities/{ => other}/eaa-app-lfi.yaml   | 0
 http/vulnerabilities/other/panabit-ixcache-rce.yaml | 9 +++++++--
 2 files changed, 7 insertions(+), 2 deletions(-)
 rename http/vulnerabilities/{ => other}/eaa-app-lfi.yaml (100%)

diff --git a/http/vulnerabilities/eaa-app-lfi.yaml b/http/vulnerabilities/other/eaa-app-lfi.yaml
similarity index 100%
rename from http/vulnerabilities/eaa-app-lfi.yaml
rename to http/vulnerabilities/other/eaa-app-lfi.yaml
diff --git a/http/vulnerabilities/other/panabit-ixcache-rce.yaml b/http/vulnerabilities/other/panabit-ixcache-rce.yaml
index eb41a7f501..9d24ed39ff 100644
--- a/http/vulnerabilities/other/panabit-ixcache-rce.yaml
+++ b/http/vulnerabilities/other/panabit-ixcache-rce.yaml
@@ -42,10 +42,15 @@ http:
 
     matchers-condition: and
     matchers:
-
       - type: regex
+        part: body
         regex:
-          - "monitor.*"
+          - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+) groups=([0-9(a-z)]+)"
+
+      - type: word
+        part: header
+        words:
+          - "text/html"
 
       - type: status
         status: