To patch a critical PHP security vulnerability, the campus administration system will suspend external services starting from October 22 at 17:00.

Subject: Emergency Notice: Campus System Security Maintenance and Service Restriction

To address a critical global security vulnerability (PHP Remote Code Execution), the university will perform emergency system security updates starting today. The maintenance schedule and operational guidelines are as follows:

1. University Administrative System Maintenance (General Users)

  • Maintenance Period: External access will be restricted starting October 22 at 17:00 through October 30.

  • Scope of Impact: Campus Information Services Systems, including:

    • Teacher Evaluation System

    • Flexible Salary System

    • Industry Training System

    • Campus-wide Project Management System

    • Integrated Campus Data Platform

    • Faculty Academic Profile System

    • Extension Education Student Management System

    • iAct Event Registration Platform

    • Counseling Appointment System

    • Book Reading System

    • Student Club Management System

    • Facility & Equipment Reporting System (Frontend & Backend)

    • Student Status Verification System

    • E-Form Online Approval System

    • Teaching Quality Assurance System

    • Freshman Information Portal

    • Student Academic Online Application System

    • Student Certificate & Credit Transfer Application System

    • Student Work-Study & Assistantship Management System

    • API Systems

    • Principal Investigator (PI) Management System

    • Student Certification & Competition Verification System

    • Office of Student Affairs (OSA) Venue & Equipment Booking Systems

    • Student Affairs Administrative e-Platform

    • Admissions Information Portal

    • Academic Affairs Integrated Query Portal

    • New Employee Onboarding System

    • Administrative AD Account Password Reset Systems (Standard & International)

    • Campus eCare

    • Facility Maintenance & Repair Request System

    • Meeting Information System

    • Physical Education System (Faculty Grading Forms)

    • Anniversary Road Race Registration System

  • Supplementary Note: To access these services during the restriction period, please connect via SSL-VPN.

2. Action Required for Departmental & Outsourced Systems (System Administrators)

If your department operates, manages, or outsources any IT systems running on PHP version 5 or higher, system administrators must immediately contact maintenance vendors to apply security updates and mitigate the risk of unauthorized remote attacks.

3. References

Please assist in forwarding this notification to all faculty, staff, and students. We apologize for any inconvenience caused during this maintenance period.

If you have questions regarding specific system statuses, please contact the respective system administrators.

Computer Center