Personally, I see a lot more problems with this than simply the ability to pass an unlimited amount t if columns. SQL injection is a concern with this type of set up.
What is your reason for choosing to have a one size fits all SP? you would be much better splitting this out to start with.
yes this structure is not normally
i want to pass table name columnname dyanically for insert and update