Is CiviCRM data vulnerable to the Drupageddon bug? Would CiviCRM data have been exposed to a Drupageddon exploit if it happened before I updated the site to Drupal 7.32?

CiviCRM is in a separate MySQL database. However, the site uses Views/CiviCRM integration so all the tables in the CiviCRM database are listed in Drupal’s settings.php file.
Since a potential attacker got access to the database, and through the evil php module, could execute code, everything on the same server must be considered compromised.