You can use the SQLPLUS command-line tool to connect to a database, login, and execute a file, but I don't think you can include an SQL statement on the command line.
You can have the BAT file ECHO SQL statements to a file and execute it.
@echo off
@rem Syntax: SQLPLUS.BAT username/password@database "SQL statement" ...
if exist temp.sql del temp.sql
:loop
echo %~2 >> temp.sql
echo ; >> temp.sql
shift /2
if "%~2" neq "" goto loop
echo exit >> temp.sql
sqlplus.exe -S %~1 @temp.sql
Alternatively, writing a console application that will allow that is quite simple.