The INTO goes behind the execute immediate as in
declare
foo number;
bar number;
begin
execute immediate 'select 1,2 from dual' into foo, bar;
dbms_output.put_line(foo ||','||bar);
end;
/
This prints:
1,2
Note that if you find youeself using dynamic SQL, it is often a good idea to review your design.