A Practical Memory Injection Attack against LLM Agents