# HG changeset patch
# User Matti Hamalainen <ccr@tnsp.org>
# Date 1252608617 -10800
# Node ID 3894755d78df61be1812c623dec666c4b4b45afd
# Parent  bf78782d99df48c37987fbb47341e74d50ab09f6
Added two more matches to Apache errorlog check.

diff -r bf78782d99df -r 3894755d78df maltfilter
--- a/maltfilter	Mon Sep 07 02:32:39 2009 +0300
+++ b/maltfilter	Thu Sep 10 21:50:17 2009 +0300
@@ -116,7 +116,7 @@
     my $merr = $3;
     if ($merr =~ /^File does not exist: (.+)$/) {
       my $tmp = $1;
-      if ($tmp =~ /\/mss2|\/pma|cpanel|admin|\/sql|mysql|websql|\/SSI.php|\/horde|\/rc$|\/xmlrpc.php|sqladm|dbadm|\/roundcube|\/webmail|\/mail|\/email|xampp|\/zen|\/cart|\/shop|\/store|mailto:|appserv|roundcube|_vti_bin|wiki|bugtrack|mantis|mantisbt|phpmanager/i) {
+      if ($tmp =~ /\/mss2|\/pma|cpanel|admin|\/sql|mysql|websql|\/SSI.php|\/horde|\/rc$|\/xmlrpc.php|sqladm|dbadm|\/roundcube|\/webmail|\/mail|\/email|xampp|\/zen.*cart|\/cart|\/shop|\/store|mailto:|appserv|roundcube|_vti_bin|wiki|bugtrack|mantis|mantisbt|phpmanager|commerce|SID_box_notns_path/i) {
         check_add_hit($mip, $mdate, "CGI vuln scan", $tmp, 6, $settings{"CHK_KNOWN_CGI"});
       }
     }