Update CVE-2021-26598.yaml

cves/2021/CVE-2021-26598.yaml

@@ -6,10 +6,12 @@ info:
   severity: medium
   description: ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).
   reference:
-    - https://nvd.nist.gov/vuln/detail/CVE-2021-26598
-    - http://karmainsecurity.com/KIS-2022-03
     - https://hackerone.com/reports/1081137
-  tags: cve,cve2021,impresscms
+    - http://karmainsecurity.com/KIS-2022-03
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-26598
+  metadata:
+    shodan-query: http.html:"ImpressCMS"
+  tags: cve,cve2021,impresscms,unauth,cms
 
 requests:
   - raw:
@@ -32,6 +34,7 @@ requests:
         words:
           - 'last_login'
           - 'user_regdate'
+          - 'uname'
         condition: and
 
       - type: status