Report vuln for apache_mod_cgi_bash_env

Now with fewer false positives! It's kinda like a check method.
In this way you catch the web target isn't just echoing the user agent :) should work?