Fuse Talk version 4.0 has various flaws that would enable a remote attacker to ban users and the possibility of tricking an administrator into adding accounts for them. It is also susceptible to various cross site scripting issues.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33259/fuse40.txt
Source: https://packetstormsecurity.com/files/33259/fuse40.txt.html