CVE-2013-10063

This advisory details multiple vulnerabilities in Netgear SPH200D firmware 1.0.4.80, including directory traversal, password change without authentication, local path disclosure, and reflected XSS. The writeup provides proof-of-concept requests and responses but does not include executable exploit code.

This Metasploit module exploits a directory traversal vulnerability in Netgear SPH200D Skype telephone devices. It attempts to access sensitive files via traversal sequences and downloads them if successful.