Gottfried Wilhelm Leibniz Universität Hannover

Server hosting: external-use VMs

Response status

Still listed as shut down

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and explicitly marks it shut down.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Official service URL

• https://uni-hannover.de/

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Inventory-Tool

Response status

Listed as restricted to university network

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and describes temporary access limited to the university network.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

OCSReports viewing page

Response status

Still listed as shut down

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and explicitly marks it shut down.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Account Manager (login.uni-hannover.de)

Response status

Listed as restricted to university network

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and describes temporary access limited to the university network.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

ISL Online remote support

Response status

Listed as restricted to university network

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and describes temporary access limited to the university network.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Elsa: Evasys

Response status

Listed as restricted to university network

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and describes temporary access limited to the university network.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Elsa: Evaexam

Response status

Listed as restricted to university network

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and describes temporary access limited to the university network.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Elsa: electronic examinations

Response status

Listed as restricted to university network

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 includes this function among restricted services and describes temporary access limited to the university network.

Scope: Distinct from restored university websites and other functions. A readable public page does not establish that this function’s restriction has ended.

What users should do

Ask university IT about access; administrators should follow official PHP update guidance.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

TYPO3 university websites

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

DL-Ticket-Service

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Shorty (go.lu-h.de)

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

LimeSurvey (survey.uni-hannover.de)

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Project storage ResourceSpace

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Image database

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Project storage DokuWiki

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

Project administration interface

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official list updated October 27 explicitly identifies this service as previously restricted but now operating normally.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence

EVV SecDoc (evv.uni-hannover.de)

Response status

Listed as restored to normal use

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The October 27 18:10 update states EVV SecDoc has been accessible from the internet again since October 26. It is also listed among services back to normal.

Scope: Restoration of this function only, not a claim that all university PHP systems or user-managed servers are fixed.

What users should do

Use normal university guidance; report issues to IT support.

Source URLs

1. Leibniz Universität Hannover: PHP vulnerability responsehttps://www.luis.uni-hannover.de/services/it-sicherheit/aktuelles-it-sicherheit/php2shellResponse evidence