msimonsftp

Is there any evidence that through this exploit, the hackers were able to inject code/make changes in the database or any other part of the file systems outside of WordPress?