This should work if you run it from the folder where your files are, quick and dirty:

for %%R in (*.sql) do sqlcmd -i "%%R" -S {server_name} -U {user} -P {pwd} -d {db_name}

This won't stop on any errors, but you can add some handling.