AssoCIateD (ACID) is a simple PHP CMS which was initially thought for an association (http://acabe.ecu.free.fr) but grew because of several demands. You may try it on the demo site : http://herve.labas.free.fr/demo
There are no reported vulnerabilities