HTML code injection vulnerability in Android Application Bosch Video Security version 3.2.3. or earlier when successfully exploited allows an attacker to inject random HTML code into a component loaded by WebView thus allowing the Application to display web resources controlled by the attacker.