Fusion News versions 3.6.1 and below suffer from a flaw that allows for unauthorized account additions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33939/fusionPHP361.txt
Source: https://packetstormsecurity.com/files/33939/fusionPHP361.txt.html