diff --git a/http/cves/2024/CVE-2024-0352.yaml b/http/cves/2024/CVE-2024-0352.yaml
index f6d2b73db4..e3255da65d 100644
--- a/http/cves/2024/CVE-2024-0352.yaml
+++ b/http/cves/2024/CVE-2024-0352.yaml
@@ -19,9 +19,9 @@ info:
   metadata:
     verified: true
     max-request: 1
-    shodan-query: title:"Likeshop"
+    shodan-query: http.favicon.hash:874152924
     vendor: likeshop
-  tags: cve2024,rce,upload-file,likeshop
+  tags: cve,cve2024,rce,file-upload,likeshop,instrusive
 
 variables:
   filename: "{{rand_base(6)}}"