Report vuln for apache_mod_cgi_bash_env

Now with fewer false positives! It's kinda like a check method.
@wvu-r7 yeah, thinking about that, I think can be done with just one request, the check regex just need to be more accurate!