Run a SQLPlus script and pass a parameter as input

Simple:
call sqlplus user/password@database @your_script.sql abc123 qwe890 <br />
Then your script:
begin dbms_output.put_line(&&1);
dbms_output.put_line(&&2);
end;
/