What you use doesn't work in PL/SQL, but in SQL*plus. The substitution-variables (&) only work with that. What i would do:
Build a db-function which build together the correct call-syntac, then use EXECUTE IMMEDIATE to execute that statement and handle the result.
Thanks for the response. Do you have an example?